Legal
Subprocessors
Effective [EFFECTIVE DATE]
The companies we use to run the service that may process personal data on your behalf. We give at least 30 days' notice before adding or replacing one.
Current subprocessors
| Company | Purpose | Data | Location |
|---|---|---|---|
| Hetzner Online GmbH | Hosting: application servers, databases, and backups in Hetzner Object Storage | All service data, including analytics events and account data | Germany and Finland (EU) |
| Paddle.com Market Ltd | Payments and billing; merchant of record and reseller | Customer account holders' billing details. No visitor data. | United Kingdom |
| [EMAIL PROVIDER] | Transactional email: login links, invitations, usage and billing notices | Account holders' email addresses and message content. No visitor data. | [EMAIL PROVIDER LOCATION, e.g. EU] |
Paddle acts as the merchant of record for purchases: for the payment itself it is an independent controller under its own terms and privacy notice, and it processes account holders' data rather than your website visitors' data.
Not subprocessors
- DB-IP — we use the DB-IP Lite database to look up approximate location from IP addresses. It is a dataset we download and run on our own servers; no data is sent to DB-IP. IP geolocation by DB-IP, licensed under CC BY 4.0.
- Stripe (when you connect it) — we read payments from your own Stripe account using the restricted key you give us. Stripe is your provider, not ours, and we send it no visitor data.
Changes
We'll email account owners at least 30 days before adding or replacing a subprocessor and update this page. Objections can be raised under section 7 of the Data Processing Agreement. Questions: [CONTACT EMAIL].