Sub-processors
Every third party that touches account or submission data on Postbag's behalf: what they do, what they see, and where.
Last updated: · Markdown
Every third party that touches account or submission data on Postbag's behalf, what it does, what it sees, and where. We give at least 14 days' notice on this page before adding a new sub-processor or changing what an existing one does.
| Sub-processor | Purpose | Data | Location |
|---|---|---|---|
| Cloudflare | DNS, reverse proxy and TLS in front of the app; forwards mail sent to [email protected] | Request metadata (IP, headers); forwarded contact email | Global network (Cloudflare, Inc., US-based) |
| Hetzner Online GmbH | Hosts the production application server and Postgres database | All account and submission data | Germany (Hetzner Online, Nuremberg — European Union) |
| Resend | Sends transactional and destination-configured notification email | Recipient address, email content (which may include submission data) | EU (eu-west-1) |
| Polar | Payment processing and Merchant of Record for paid plans, once billing is enabled | Billing contact details, subscription and payment metadata | Global Merchant of Record; payouts via Stripe Connect |
| Google / GitHub | Sign-in, only when an account holder chooses that provider | Name, email address and account identifier from the provider | Google LLC / GitHub, Inc. (US-based) |
This list is also referenced from the Data Processing Addendum and the Privacy Policy. Questions: [email protected].