Service providers (subprocessors)
Last updated
Effective [SUBPROCESSORS EFFECTIVE DATE]
These are the providers ("subprocessors") that handle personal data for URAKIMON: data about account holders, and information about people that appears in records while a record exists. Each acts on our instructions under its data processing terms.
1. Current providers
| Provider | What it does | Data it handles | Location | Safeguard for data from Europe |
|---|---|---|---|---|
| Cloudflare, Inc. | Carries and protects all traffic to the website and the API; the sign-in check (Turnstile) | IP addresses and request details of every visit and API call, and whatever those requests carry, including account details and records | United States (company); worldwide network | EU-U.S. Data Privacy Framework, with the UK Extension |
| OVH US LLC (OVHcloud) | Runs URAKIMON's servers | Everything URAKIMON stores: account, billing, jobs and records | United States (Virginia) | EU-U.S. Data Privacy Framework, with the UK Extension |
| Crunchy Data (Crunchy Bridge) | Manages the database and its backups | Account, billing, jobs and records | [DATABASE REGION] | Standard Contractual Clauses in its data processing addendum |
| Stripe, Inc. | Takes payments for credit and plan subscriptions | Email address, account reference, payment details (card details go to Stripe directly) | United States | EU-U.S. Data Privacy Framework, with the UK Extension |
| Resend | Sends account emails | Email address and the content of account emails | United States | EU-U.S. Data Privacy Framework, with the UK Extension |
| Functional Software, Inc. (Sentry) | Error reports, when error reporting is on | Error details, without IP addresses, cookies or account fields, and with secrets removed | [ERROR REPORTING REGION] | EU-U.S. Data Privacy Framework, with the UK Extension |
| TeraShift GmbH (Evomi) | Network provider that carries URAKIMON's requests to sources' public pages | The addresses and search terms of requests, and the public pages returned, which can include information about people in records. No account data. | Switzerland (company); worldwide network | Adequacy decisions of the EU and the UK for Switzerland |
2. Providers that are also controllers
Stripe uses payment information for its own purposes, such as fraud prevention and meeting its legal duties, and Cloudflare uses Turnstile signals to improve Turnstile. For those purposes each is an independent controller under its own privacy policy. The privacy notice explains more.
3. Changes to this list
When this page changes, we post the new version here at least 30 days before it applies, and the effective date at the top changes with it. A change that the law, a court or an authority requires can apply sooner, from when we post it. A new provider does not start handling personal data before then. If you object to a new provider, write to us before it starts; if we cannot resolve the objection, you can delete your account and we refund the unused part of credit you bought.
4. Questions
Write to [PRIVACY EMAIL].