Sub-processors
Last updated: 2026-10-25. Same list as in the DPA.
These providers process account or usage data on our behalf. Our datasets hold no personal data and are not sent to any of them as personal data. We tell customers by email at least 30 days before we add or replace one. To get those notices, write to [email protected].
| Provider | Location and transfer basis | Purpose | Data involved |
|---|---|---|---|
| Hetzner Online GmbH | Germany (EU) | Hosting of the API, the MCP server and the database | Account and usage data, watchlists |
| Cloudflare, Inc. | Global network; EU-US Data Privacy Framework and standard contractual clauses | Website delivery, DNS and web application firewall; storage of encrypted off-site backups (R2, EU bucket) | IP addresses of visitors in transit; encrypted backups |
| Stripe Payments Europe, Ltd. | Ireland (EU); transfers under the EU-US Data Privacy Framework and standard contractual clauses | Card payments, subscriptions and invoices | Billing contact, company name, payment details (card data goes to Stripe directly and never reaches us) |
| Resend, Inc. (EU region) | Sending region in the EU; standard contractual clauses for the provider itself | Email delivery: sign-in links, billing notices, alerts you subscribed to | Email address of the recipient and the message |
| Apify Technologies s.r.o. | Czech Republic (EU) | Only for customers who use our actors or the MCP server through Apify: runs them and bills under its own terms | Whatever the customer sends to those actors |
Change log
- 2026-10-25: list published as its own page; Stripe and Resend (EU region) added to the table.
- 2026-10-23: first version (Hetzner, Cloudflare, Apify), in the DPA.
See also security, DPA and privacy notice.