Everyone who can see your data.
Eight third parties, what each one does, what it can see and where it runs. This list is complete; if a vendor is not on it, it does not hold Vessim customer data.
The list
| Processor | What it does | What it sees | Where |
|---|---|---|---|
| Vercel | Hosting and content delivery for the site and the application | IP address, request metadata | United States, global edge |
| Supabase | The database and the sign-in system behind your account | Email address, account record, designs, orders, addresses | United States |
| Printify | Routes an order to a print partner and returns tracking | Recipient name, shipping address, order contents, design file | United States, European Union |
| Print partners | Manufacture and dispatch the physical item | Recipient name, shipping address, design file | See the partners page |
| Stripe | Takes payment and handles refunds | Payment details, billing address, email | United States, Ireland |
| Resend | Sends transactional email — receipts, dispatch and tracking | Email address, order number | United States |
| Anthropic | Interprets the sentence and writes the design brief | Prompt text | United States |
| Carriers | Deliver the parcel | Recipient name, shipping address | Destination country |
Print partners specifically
A print partner is a sub-processor like any other, with one difference: which one receives your order depends on what you bought and where it is going, because an order routes to the partner nearest the recipient. The set of countries we print in is published on the partners page. A partner receives the recipient’s name and address and the design file, and nothing else — no email, no payment details, and no price, which is why the packing slip in a gift never shows one.
What is deliberately absent
There is no advertising network, no retargeting pixel, no data broker, no session-recording tool and no third-party analytics on this list, because none is in use. The cookie policy says the same thing from the other direction.
Design images are not sent to any vendor beyond the ones above, and prompts are not used to train a general-purpose model. See IP & copyright.
Changing the list
Adding a sub-processor is a change to this page, published at least thirty days before the vendor begins processing. Business customers with a data processing agreement can subscribe to notifications of changes by writing to legal@makevessim.com, and may object to an addition under the terms of that agreement.
Your data
To see, export or delete what any of these hold about you, use data requests. We pass deletion instructions to every processor on this list that holds the record, not just to our own database.
If you can imagine it, we can create it.
Anything, designed from a sentence, printed by a partner near you, shipped to the door.