Sub-processors
The suppliers that process personal data for us to run Intake. Each works only on our instructions, under a written contract with data protection terms at least as protective as ours.
Last updated: [DATE]
| Supplier | What for | Where |
|---|---|---|
| [HOSTING PROVIDER, e.g. the VPS company] | Servers and storage for the service and its database | United Kingdom ([CHECK]) |
| Stripe Payments Europe Ltd / Stripe, Inc. | Sells paid subscriptions as merchant of record: payment, receipts, tax and disputes. For purchase data Stripe is a controller in its own right, under its own privacy policy | UK, EU and USA |
| MXroute | Sending email (account emails and our customers' form notifications) | [CHECK MXROUTE LOCATIONS] |
| [BACKUP STORAGE PROVIDER, if separate] | Encrypted backups | [LOCATION] |
Destinations you choose
These are not our sub-processors: data goes to them only because a customer sets it up, and the customer is responsible for that choice.
- Google reCAPTCHA, if turned on for a form (off by default; proof of work needs no third party)
- Integrations: email recipients and mail servers, webhooks, n8n, ntfy, Slack, Microsoft Teams, Discord and Telegram
Changes
We tell workspace owners by email at least 30 days before a new sub-processor starts handling data. To hear about changes without an account, email intake@starstorm.dev. If you object to a change on reasonable grounds, our terms explain what happens.