When we run the service, these companies process personal data on our behalf, under written terms that protect it at least as our Data Processing Agreement does. We tell customers by email at least 30 days before we add or replace one, as the Data Processing Agreement describes.
Hetzner Online GmbH, Germany
- What it does for us: servers and storage: app.herapress.com, its database and Hera Backup Hub backups; the monitoring servers and Hera Site Monitor screenshots; herapress.com.
- Where the data is: Finland (Helsinki), Germany (Nuremberg).
Amazon Web Services, Inc., United States
- What it does for us: sends the service's emails: account emails and Hera Site Monitor alerts (Amazon SES).
- Where the data is: Australia (Sydney).
Zoho Corporation Pte. Ltd., Singapore
- What it does for us: our mailbox and our support desk: emails you send us and support tickets.
- Where the data is: United States.
Telegram Messenger Inc.
- What it does for us: delivers Hera Site Monitor alerts to the Telegram chats you link to a site, if you link any, and our own team's operations alerts, which can name a customer's email address or site.
- Where the data is: Telegram's own servers.
Cloudflare, Inc., United States
- What it does for us: checks that a visitor is not a bot on the sign-up, password reset and, after failed attempts, sign-in forms (Turnstile).
- Where the data is: Cloudflare's global network.
Transfers outside the European Economic Area, to Australia and the United States, rely on the European Commission's Standard Contractual Clauses, or for a company certified under the EU-US Data Privacy Framework, on that framework.
Not on this list
- Paddle sells our plans as Merchant of Record. It decides itself how it handles your payment details and billing address, under its own privacy policy, so it is not our sub-processor.
- Google signs you in only if you choose "Sign in with Google", under Google's own privacy policy.
- Your own email provider and the Telegram app on your phone, which receive the alerts you asked for.