These are the third parties that process personal data for us when we provide the hosted Fondoo service. This list is part of our Data Processing Agreement (Annex 3) and our Privacy Policy.
| Sub-processor | What they do for Fondoo | Personal data involved | Location |
|---|---|---|---|
| Stripe, Inc. and affiliates | Billing for Fondoo plans and usage; Stripe Connect for customers' checkout | Billing contact, payment details (held by Stripe), transaction data, Connect onboarding data | United States (global) |
| Amazon Web Services, Inc. (SES and SNS) | Sending email; bounce, complaint and delivery notifications | Recipient addresses, email content, delivery events | United States (us-east-1) |
| Cloudflare, Inc. | Hosting (Workers), file storage (R2), DNS, content delivery, security and bot protection | Site content and files, visitor IP addresses and request data | United States; global network |
| TONVI TECH SL (Upload-Post) | Publishing posts to social networks | Post content and media, connected social account details and tokens | Spain (EU) |
| Railway Corporation | Application hosting | All Service data passing through the app | United States |
| Neon | Managed Postgres database | Account, workspace and customer business data stored in the database | United States |
| Functional Software, Inc. (Sentry) | Error monitoring | Technical data in error reports, which may include user IDs, IP addresses or request details | United States |
| Google LLC | Sign in with Google; Google Search Console when you connect it | Sign-in profile and email; site and search performance data | United States |
| GitHub, Inc. | Sign in with GitHub; GitHub integrations when you connect them | Sign-in profile and email; repository data you choose to connect | United States |
Providers you connect yourself
When you connect your own provider (for example your AI agent or AI key, your own Stripe account in direct mode, Shopify, WordPress, a social network, a support desk or an email service), we send it data at your direction. Those providers work for you under your agreement with them. They are not Fondoo's sub-processors, and you're responsible for listing them in your own privacy notice where needed. You can see your connected providers in your workspace.
Changes
We'll update this page before adding or replacing a sub-processor and give customers who accepted our DPA at least 30 days' notice by email or in the dashboard, so they can object as described in the DPA. To get notices, keep your account email current.
Questions: [email protected]