Subprocessors
Version 1.9.0 · in effect from 26 August 2026
This page lists the third parties that process personal data on our behalf when you use Sitekeep. It is referenced by our Privacy Policy, which carries the same list — this page exists separately so that it can be kept current without republishing the whole policy.
A “subprocessor” is a company we bring in to help run the Service that, in doing so, handles data belonging to you or your users. A vendor we buy from that never touches your data is not one, and is not listed here.
Where your data is stored
Sitekeep runs on a server we rent from Hetzner Online GmbH in Helsinki, Finland. Your Customer Data — work orders, attachments, and the search index — is stored there. An encrypted copy of the database is backed up daily to Cloudflare R2 object storage within the European Union.
Both companies hold your data in a form they cannot read: the server’s disk is encrypted in full, and each backup is encrypted before it leaves it, with keys we hold and they do not. They are subprocessors all the same, and lead the table below.
Cloudflare appears for a second, unrelated reason. When someone submits a maintenance request through a customer’s public request portal, Cloudflare Turnstile checks that the submission comes from a person and not a script. That check receives the submitter’s IP address and signals about their browser — no name, no message, no attachment. It is the one place in the Service where we process data about somebody who is not a customer’s user and has agreed to nothing, which is why it is called out here rather than left in the table.
Current subprocessors
| Provider | What it does | What it receives | Location |
|---|---|---|---|
| Hetzner Online GmbH | Hosts the Service | All Customer Data, on an encrypted disk it cannot read | Finland |
| Cloudflare | Stores database backups, and screens public request portal submissions for automated abuse | A complete copy of the database, encrypted before it reaches Cloudflare with a key it does not hold; and, separately, the IP address and browser signals of someone submitting a request | European Union (backups); United States (bot protection) |
| OpenAI | Transcribes audio notes to text | The audio of voice notes recorded on a work order | United States |
| Voyage AI | Builds the semantic search index | Work order text, including transcripts | United States |
| Anthropic | Generates natural-language search answers | A search query and the passages retrieved for it | United States |
| Resend | Service, billing, and invitation email | Recipient name and email address, and the message | United States |
| Expo | Delivers notifications to mobile devices | A device token and the notification’s contents | United States |
We contractually require the three AI providers not to use your content to train their models, and to retain it only transiently for abuse monitoring where their own terms require it.
Who sells you the subscription, and why they are not on that list
Paddle.com Market Ltd is the merchant of record for every subscription. It takes your payment, issues your invoice, and calculates and remits the tax where you are. It receives your billing contact details, address, tax identifiers, and payment details.
It is not a subprocessor, and the distinction is not a technicality. A subprocessor handles your data on our behalf, under our instructions, for a purpose we set. Paddle handles that billing data as the seller, for its own purposes and under its own terms — it is an independent controller of it, not somebody acting on our instructions. Listing it above would describe a relationship that does not exist and imply we control what it does with your payment details.
What that means for you in practice: your card details go to Paddle and never to us, and Paddle’s own privacy policy governs what it holds. No Customer Data — no work orders, attachments, comments, or search index — ever reaches it. It sees who is paying, not what the Service is being used for.
What we run ourselves
These handle data about how the Service is used, and they are not subprocessors — no third party receives what they collect, because they run on the same server as everything else:
| Software | What it does |
|---|---|
| Umami | Website analytics. Sets no cookies and collects no personally identifiable information |
| GlitchTip | Error and crash diagnostics |
| SigNoz | Performance and reliability telemetry |
Changing this list
We give at least 30 days’ notice before adding a subprocessor that processes Customer Data. If you object on reasonable data-protection grounds within that period and we cannot resolve your objection, you may terminate the affected subscription and receive a prorated refund of prepaid, unused fees. That commitment is in the Privacy Policy §7 and the Refund Policy §8.
To be told when this page changes, write to [email protected] and ask to be added to the notification list. It is used for nothing else — we send no marketing email.
International transfers
We are established in India and operate the Service from there. Customer Data is stored in Finland, its backups in the European Union, and the other providers above operate in the United States. India is not the subject of a European Commission adequacy decision, and storing the data in the EEA does not change that — we access it from India, and that access is a transfer — so where personal data of people in the EEA, UK, or Switzerland reaches us we rely on Standard Contractual Clauses — with the UK International Data Transfer Addendum where the UK’s rules apply — or another lawful transfer mechanism. A copy is available on request.
Questions: [email protected] · Tilak Kumar G, sole proprietor trading as TurtleByte · 2nd Floor, No. 17, 7th Main Road, Bengaluru, Bengaluru Urban, Karnataka 560038, India