Subprocessors
These are the service providers that process personal data for Invokely. For each one, we list its role, its location and, where data leaves the European Economic Area, the safeguard that covers the transfer.
Our application and database run in the European Union. We have a data processing agreement with each provider that acts on our instructions.
Hetzner Online GmbH
- Role: hosting of the application server, database and reverse proxy. Processor.
- Entity: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany.
- Data location: Helsinki, Finland (EU).
- Data: all data held by the service, including account data, usage counts, billing identifiers and reverse proxy logs.
- Transfer safeguard: none needed. Data stays in the EU.
Cloudflare, Inc.
- Role: DNS for invokely.ai, the Turnstile security check on sign-in forms, and storage of encrypted database backups in Cloudflare R2. Processor. For Turnstile, Cloudflare also acts as a controller when it uses signals to improve its bot detection.
- Entity: Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, United States.
- Data location: backups are stored in R2 with a Western Europe location setting and are encrypted before they leave our server. Turnstile and DNS run on Cloudflare's global network.
- Data: IP address, user agent and related signals for Turnstile; encrypted backups of the database.
- Transfer safeguard: EU-U.S. Data Privacy Framework certification, and Standard Contractual Clauses in Cloudflare's data processing addendum.
Stripe
- Role: payment processing, subscriptions, invoices and the billing portal. Processor for payments made to us. Independent controller for some data, for example to meet financial regulation and prevent fraud.
- Entity: Stripe Payments Europe, Limited (Ireland) is the contracting entity for EEA businesses. Stripe Technology Europe, Limited (Ireland) provides regulated payment services in the EEA.
- Data location: EU and United States.
- Data: name, email address, billing address, payment method details and payment history. Card numbers are handled only by Stripe.
- Transfer safeguard: EU-U.S. Data Privacy Framework certification, and Standard Contractual Clauses.
Resend
- Role: delivery of sign-in links and other transactional email. Processor.
- Entity: Plus Five Five, Inc. (trading as Resend), 2261 Market Street #5039, San Francisco, CA 94114, United States.
- Data location: United States.
- Data: recipient email address and the content of the email.
- Transfer safeguard: EU-U.S. Data Privacy Framework certification, and Standard Contractual Clauses in Resend's data processing agreement.
- Role: optional sign-in with a Google account. Google acts as an independent controller of your Google account and of the data it processes when you sign in.
- Entity: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, for users in the EEA and Switzerland. Google LLC (United States) for other users.
- Data location: Google's global infrastructure.
- Data: email address, name and Google account identifier, sent to us only after you approve the sign-in.
- Transfer safeguard: Google LLC is certified under the EU-U.S. Data Privacy Framework and also uses Standard Contractual Clauses.
Changes to this list
We update this page before a new provider starts processing personal data. If you have a question about a provider, write to privacy@invokely.ai.