Subprocessors

Current list

• Supabase — Database, authentication and file storage (EU (Frankfurt)).
• Vercel — Application hosting; the server code runs here (EU (Frankfurt)).
• GitHub — Nightly database backup: taken on GitHub's servers, encrypted there before it is stored, and kept for 30 days (US).
• Meta Platforms — Reading your ad data; and, only if your workspace turns it on, sending outcome events to your own Meta dataset (US / EU).

Our commitments

• Each subprocessor is bound by a written agreement that protects personal data at least as well as our data processing terms.
• We remain responsible to you for the work of every subprocessor.
• Each one gets only the data it needs for its task.
• Where a subprocessor processes personal data outside the EEA or the UK, the transfer relies on the European Commission's Standard Contractual Clauses and, for the UK, the UK Addendum.

Changes

You are told at least 30 days before a new subprocessor starts processing personal data. You may object in writing within that period; if we cannot resolve the objection, you may end the agreement.

Contact

Please contact the business that gave you access to this service.