Subprocessors
| Provider | What it does | Personal data | Location | Transfer safeguard |
|---|---|---|---|---|
| netcup GmbH | Hosting: the servers that run Seentics and its databases | All data the service holds | Germany | None — within the EU |
| Cloudflare, Inc. | Delivery of the website, dashboard and tracking script; object storage for session recordings, heatmap snapshots and backups (encrypted) | Visitor IP addresses in transit; recordings and snapshots at rest | Global network; storage in the EU | EU–US Data Privacy Framework; Standard Contractual Clauses |
| Amazon Web Services, Inc. (Amazon SES) | Transactional email: sign-up, password reset, alerts, reports | Recipient email addresses and the message | United States (N. Virginia region) | EU–US Data Privacy Framework; Standard Contractual Clauses |
| OpenAI, L.L.C. | AI Mode, only when a customer uses it: answers questions about their own analytics | The question, and aggregate figures with identifiers removed before they are sent — never visitor identifiers, IP addresses or recordings | United States | EU–US Data Privacy Framework; Standard Contractual Clauses |
Not subprocessors
These handle personal data in connection with Seentics, but as independent controllers rather than for us:
- Lemon Squeezy, LLC — Our merchant of record. It sells Seentics subscriptions in its own name, and processes payment and tax data as a controller under its own privacy policy.
- Google LLC and GitHub, Inc. — Only if you choose to sign in with them: they confirm who you are and share your name and email address with us.
Alert destinations you connect yourself — Slack, Discord, PagerDuty, Opsgenie, webhooks — receive what you send them on your instructions; they are your providers, not ours. Location lookups use a database on our own servers: no visitor IP address is sent to a third party for them.
Changes
We tell account holders by email at least 30 days before a new subprocessor starts processing their data, so they can object. Questions: privacy@seentics.com.