Last updated October 1, 2026
These are the third parties that process personal data on our behalf to provide Privatus Analytics. We give at least 30 days' notice of changes by email to workspace owners and in the change log below, and customers may object as described in the DPA. Visitors' IP addresses and user agents are never stored by us, and location is country only.
Customer data (visitor analytics and workspace content)
| Provider | Purpose | Data | Location |
|---|---|---|---|
| DigitalOcean, LLC | Hosting of the application servers, background workers and the container registry | Minimized analytics events, workspace content and account data | United States |
| Cloudflare, Inc. | Content delivery, TLS and attack protection in front of the whole Service, including the tracker script and event collection. Provides the visitor's country code with each request | Visitor IP address and user agent in transit only, to route and protect requests. Nothing is stored by us beyond the country code | Global (Cloudflare network) |
| Amazon Web Services, Inc. (Amazon SES) | Sending email, including email reports, alerts and status page updates | Recipient email address and message content | United States |
| Anthropic, PBC | AI assistant answers, only when a member uses the assistant | The member's question and the aggregated analytics results needed to answer it (no visitor-level data) | United States |
| Functional Software, Inc. (Sentry) | Error monitoring | Technical error data with request headers and tokens stripped, and member IDs where needed | United States |
Account and business data
| Provider | Purpose | Data | Location |
|---|---|---|---|
| DigitalOcean, LLC | Hosting of the application servers and background workers that handle accounts, workspaces and billing | Account, workspace, billing and program records | United States |
| Cloudflare, Inc. (Cloudflare Turnstile) | Bot protection on public forms (sign-up, sign-in, password reset, magic link, contact, newsletter, waitlist, status page subscriptions, shared dashboard passwords) | IP address and browser and device signals of people submitting those forms | Global (Cloudflare network) |
| Paddle.com Market Ltd | Merchant of record: payments, invoicing and sales tax | Billing contact, payment details, invoices | United Kingdom and United States |
| Amazon Web Services, Inc. (Amazon SES) | Account, billing and newsletter email | Email address and message content | United States |
| Proton AG (Proton Mail) | Our mailbox: the email you send us, such as support requests, and our replies | Name, email address and message content | Switzerland |
| Wise Payments Limited | Affiliate payouts, only for affiliates paid through Wise | The affiliate's Wise email address and payout amount | United Kingdom and United States |
Integrations you turn on yourself, such as Slack, Microsoft Teams, webhooks, warehouse exports, Google Search Console and Bing Webmaster Tools, exchange data with the provider you choose, on your instructions. They are not our subprocessors.
Change log
| Date | Change |
|---|---|
| October 1, 2026 | Added Proton AG (Proton Mail) for our mailbox. Listed DigitalOcean under account and business data as well, since it hosts both. |
| September 30, 2026 | Updated to the providers the Service uses: DigitalOcean for hosting (instead of the proposed Hetzner), Cloudflare for content delivery and the visitor country (instead of the proposed bunny.net), and Amazon SES for email (instead of the proposed Postmark). Added Wise for affiliate payouts. Removed the placeholder support desk, since support runs by email. |
| September 30, 2026 | Added Cloudflare, Inc. (Cloudflare Turnstile) for bot protection on public forms. |
| September 29, 2026 | Initial list published. |
Want to hear about changes? We email workspace owners before a change, and anyone can follow changes in the changelog feed.