Legal
Subprocessors
The companies that process personal data on LaunchFaro's behalf, what for, where, and whether each is in use yet.
- Version
- 0.1
- Last updated
Draft for legal review
1. What this page is
A subprocessor is a company we use that handles personal data for us. We list each one with its purpose and location and say plainly whether it is in use yet. Where a provider has not been chosen, the row says so: we do not list a company we have not engaged, and we do not hide one we have.
2. Current list
| Subprocessor | Purpose | Personal data | Location | Status |
|---|---|---|---|---|
| Contabo | Hosting of the application, database, worker and backups on one virtual server | Everything described in the Privacy Policy | Region chosen by the operator at order time (to be stated before launch) | Planned: the operator's own server, nothing deployed yet |
| Lemon Squeezy | Merchant of record: takes payment, collects and remits sales tax, issues receipts | Customer email, name, billing country and address, tax ID, payment details | Provider's own locations (to be confirmed by the operator) | Default provider behind an adapter, not connected yet |
| Resend | Sends transactional and reminder email | Recipient address, subject, message body, delivery events | Provider's own locations (to be confirmed by the operator) | Supported in code, off until configured |
| Optional sign-in with Google | Google account identifier and email address | Provider's own locations | Planned | |
| Backup storage provider | Encrypted off-server copies of the database | The database | To be named | Not yet selected |
| Mailbox provider for the verification domain | Receives the mail directories send to the aliases | Alias addresses, directory notices | To be named | Not yet selected |
Statuses: "Planned" and "Not yet selected" mean the provider does not handle any personal data yet. Before launch each row must read as in use or be removed.
3. Not subprocessors
- Directories you instruct us to submit to are independent recipients, not our processors. Each decides what it does with a listing. See the Privacy Policy.
- Apple and GitHub are queried for public product information. No personal data is sent to them.
- Search engines index our public pages.
4. Tools we do not use
We do not use third-party analytics, advertising, session-recording, error-tracking or customer-chat services. If that changes we add them here first.
5. Changes and objections
We update this page before a new subprocessor starts handling personal data and give 30 days' notice by email to customers with an account. A customer who has a Data Processing Addendum with us can object in writing within that period; if we cannot reasonably meet the objection, the customer may cancel without penalty and receive a refund for the unused period.
Questions: [to be completed: operator.privacyEmail].
Previous versions
There are no earlier versions: this is the first.