They process your visitors' data
| Who | What for | What they see | Where |
|---|---|---|---|
| Hetzner Online GmbH, Gunzenhausen, Germany | Hosting: every Recapi server (API, databases, model training) and the storage holding our off-site backups | Everything your site sends us. Backups are encrypted on our servers before they reach the storage. | Germany (Falkenstein, Nuremberg) and Finland (Helsinki): we book servers and backups in these sites only |
| Cloudflare, Inc., San Francisco, USA | DNS for our domains, and the network in front of the API when Recapi runs on several servers: protection against attacks, spreading requests over our servers, caching the public list of popular items | DNS: nothing. In front of the API: each request passes through it, with the visitor's IP address and the ids and items in that request. | Cloudflare's global network: a request is decrypted at the location nearest the visitor, which may be outside the EU/EEA. Transfers rely on the EU-US Data Privacy Framework, with the Standard Contractual Clauses of Cloudflare's data processing addendum as the fallback. |
They process only account and billing data
These never receive your visitors' data. They serve our relationship with you, for which we are the controller.
Draft. The entries marked [OWNER] are being reviewed.
| Who | What for | What they see | Where |
|---|---|---|---|
| Amazon Web Services EMEA SARL, Luxembourg (Amazon SES) | Sending our own emails: early-access confirmations and sign-up invitations | The recipient's email address and the message | AWS region eu-central-1, Frankfurt, Germany |
| Stripe Payments Europe, Ltd., Dublin, Ireland | Billing for paid plans, once you add a payment method | Organization name, billing email, monthly usage. Your card is entered on Stripe's own page and never reaches us. | [OWNER] |
| [OWNER: our alert service] | Alerts to our operator when something breaks | Server and service names and, for quota or billing alerts, an organization's name. No visitor data. | [OWNER] |
Not subprocessors
These receive no personal data from you or your visitors: Let's Encrypt (TLS certificates, from domain names only), GitHub (our source code and its automated tests, on test data), Anthropic (our automated coding agents, which work on the source code and test databases, never on production data), and the Debian and Docker software repositories our servers install software from. Our monitoring runs on our own servers.
Changes
We tell customers at least 30 days before we add or replace a subprocessor, under our data processing agreement. For the agreement, write to hello@recapi.io. How we handle your data: our privacy policy.