Who processes your data
Version 1.2 · Effective
1. Companies that process data for us
Each company receives only what it needs to do its part and is bound by a contract with data protection obligations.
| Company | What it does | Data involved | Where |
|---|---|---|---|
| Cloudflare, Inc. | Hosts the website and API and protects them from attacks | IP address and request logs, for up to 7 days; support message attachments, for as long as the messages are kept | United States, with a global network |
| Neon | Database | Account, devices and subscriptions | United States (Ohio) |
| Resend | Sends the email with your sign-in code and receives and sends support messages | Email address and message content, including attachments | Sent from Brazil (São Paulo); US company |
| Network infrastructure partner (name kept confidential under a commercial agreement) | Operates the VPN servers | Each device's technical code and the encrypted traffic passing through the network | Based outside Brazil and the European Union; servers in 45 countries |
2. Once website sales open
Sales on our website are not open yet. When they are, the payment providers will join this list; they receive purchase data (name, email, country and card or local payment details):
- Stripe, Inc. (United States)
- dLocal (Uruguay)
The App Store (Apple), Google Play (Google) and Amazon aren't listed as processors: when you buy through them, each store handles your data as an independent controller.
3. Changes to this list
Before we share customer data with a new company, we update this page. Questions: [email protected].