Draft, not yet in force. Some details on this page are still being finalised.
Subprocessors
Last changed TBD — launch date · Version 1.0
These are the third-party services that may process personal data when we provide TidyKB. Each one is bound by a data processing agreement with us. This page is Annex III of our Data Processing Addendum.
Get notified of changes. Email privacy@tidykb.net with the subject "Subprocessor updates" and we will email you at least 14 days before we add or replace a subprocessor. Account owners are notified automatically.
Contents
- Subprocessors
- Not subprocessors: services that act on their own account
- Self-hosted tools
- Change history
Subprocessors
| Subprocessor | Purpose | Data processed | Location | Transfer safeguard |
|---|---|---|---|---|
| Hetzner Online GmbH | Servers, database, nightly backups | All service data | Germany (EU) | Not needed (EU) |
| Anthropic, PBC | AI translation drafts | Title and text of the articles in a translation batch you start, and your glossary | United States | SCCs (Anthropic DPA) |
| Resend (Plus Five Five, Inc.) | Transactional email: sign-in and verification emails, audit reports, weekly health reports | Recipient email address, email content (issue summaries, article titles) | United States | SCCs |
| Cloudflare, Inc. | Turnstile, the bot check on the free audit form | The Turnstile token and the IP address the check sees | Global network | Data Privacy Framework; SCCs |
| Porkbun LLC | DNS for our domains, and forwarding for our hello@, support@ and billing@ addresses |
Email you send to those addresses, in transit | United States | Not yet confirmed |
| Google LLC | The mailbox our support address is forwarded into | Emails you send us and our replies | United States / global | Data Privacy Framework; SCCs |
Not subprocessors: services that act on their own account
| Service | Role |
|---|---|
| Paddle.com Market Ltd and its affiliates (UK/US) | Reseller and Merchant of Record for all purchases. Processes payment and billing data as an independent controller under its privacy notice. |
| Google LLC (Sign in with Google) | Authenticates you if you choose Google sign-in; Google's privacy policy applies. |
| Freshworks Inc. (Freshdesk) | Your own help-desk provider. TidyKB connects to your Freshdesk account on your instructions; Freshworks is not our subprocessor. |
Self-hosted tools
These run on our own servers at Hetzner in Germany, so no third party receives data through them: Postgres (database), Umami (cookieless website analytics), GlitchTip (error tracking), and Grafana/Loki (logs).
Change history
| Date | Change |
|---|---|
| TBD — launch date | First version. |