LoftSync Service Providers and International Transfers
Last revised: 12 October 2026
This page provides information about external service providers used by LoftSync, the role each provider performs, the information involved, where processing may take place and the safeguards used for international transfers.
1 Apple
Provider: Apple Distribution International Ltd. and other Apple group entities involved in App Store and notification services.
Role: Independent controller for App Store purchases and related payment administration; service provider for Apple push-notification delivery.
Services used by LoftSync:
- App Store subscription purchases and subscription management;
- App Store transaction and renewal information;
- delivery of push notifications to Apple devices.
Information involved: subscription status, transaction identifiers, purchase and renewal events, device notification tokens and information processed by Apple as part of its own payment, fraud-prevention and account services.
Processing locations: Apple may process information in the European Economic Area and in other countries where Apple group companies or service providers operate.
International transfers: Apple applies the international-transfer mechanisms described in its applicable privacy and data-transfer terms, including adequacy decisions and contractual safeguards where required.
2 Google
Provider: Google Cloud EMEA Limited and other Google group entities involved in the relevant services.
Role: Depending on the service, Google acts as a processor or independent controller.
Services used by LoftSync:
- Google Play subscriptions and purchase administration;
- Firebase Cloud Messaging for push notifications;
- Google Gemini API for optional intelligent OCR and pedigree recognition.
Information involved:
- Google Play: subscription status, transaction identifiers, purchase and renewal events;
- Firebase Cloud Messaging: device notification tokens and notification-delivery information;
- Google Gemini: images voluntarily submitted for recognition, extraction instructions and recognition results.
Processing locations: Google may process information in the European Economic Area and in other countries where Google or its service providers maintain facilities.
International transfers: where personal data is processed outside the European Economic Area, Google relies on applicable transfer mechanisms such as adequacy decisions, the EU-US Data Privacy Framework for participating entities, and standard contractual clauses where required.
Additional information about Gemini processing and retention is provided in the LoftSync Privacy Policy.
3 Microsoft Azure
Provider: Microsoft Ireland Operations Limited and other Microsoft group entities involved in providing Azure services.
Role: Processor providing cloud storage infrastructure.
Service used by LoftSync: Azure Blob Storage for photographs and other media uploaded to LoftSync.
Information involved: photographs and other media files uploaded by users, together with technical metadata necessary to store and retrieve those files.
Processing location: LoftSync media storage is configured in Microsoft Azure infrastructure located in Belgium.
International transfers: Microsoft may use affiliated companies and subprocessors in connection with Azure services. Where personal data is transferred outside the European Economic Area, Microsoft applies the transfer mechanisms described in its applicable data-protection terms, including adequacy decisions and standard contractual clauses where required.
4 Stripe
Provider: Stripe Payments Europe, Limited and other Stripe group entities involved in payment processing.
Role: Payment processor and, for certain payment, fraud-prevention, compliance and regulatory activities, an independent controller.
Services used by LoftSync:
- payment processing for subscriptions purchased directly from BRICON through the LoftSync Store;
- billing and transaction administration;
- fraud-prevention and payment-security services.
Information involved: contact information, billing information, transaction identifiers, payment status, customer-country information needed for tax purposes and payment-method information processed directly by Stripe.
Full payment-card details are handled by Stripe and are not stored by LoftSync.
Processing locations: Stripe may process information in the European Economic Area and in other countries where Stripe group companies or service providers operate.
International transfers: Stripe uses applicable international-transfer mechanisms, including adequacy decisions, the EU-US Data Privacy Framework where applicable and standard contractual clauses where required.
5 International processing
Where GDPR applies and an external service provider processes personal data outside the European Economic Area, the provider uses an applicable lawful transfer mechanism where required. This may include:
- a European Commission adequacy decision;
- the EU-US Data Privacy Framework, where applicable;
- standard contractual clauses approved by the European Commission; or
- another transfer mechanism permitted by applicable law.
6 Contact
For questions about a provider, its role, processing location or applicable transfer safeguards, contact:
BRICON NV
Europark-Oost 15/C
9100 Sint-Niklaas
Belgium
