Subprocessors
Last updated:
The third parties below may process personal data when you use Inkvoice Cloud or this website. For each one we list what it does, where it operates, and a link to its published data protection terms. Paddle and the optional sign-in providers (Google, Microsoft, and Apple) act as separate controllers under their own terms rather than on our behalf. We will give advance notice of new subprocessors so that tenants who have opted in to such notifications can object.
| Subprocessor | Purpose | Location | Terms |
|---|---|---|---|
| Alwyzon (Hohl IT e.U.) | Server hosting for Inkvoice Cloud (the app and every workspace database) and for our self-hosted analytics (Umami), newsletter (Listmonk), demo, and docs | Austria (EU) | Terms of Service |
| Cloudflare, Inc. | DNS for inkvoice.app; sending Inkvoice Cloud system email (such as sign-up verification, password resets, and export and deletion notices); routing inbound mail to support@inkvoice.app; reverse proxy in front of our analytics, newsletter, demo, and docs hosts. Traffic to cloud.inkvoice.app and workspace subdomains does not pass through Cloudflare. | Global (DPA includes SCCs) | DPA |
| Paddle.com Market Limited | Merchant of record for paid plans: checkout, payment processing, invoices, and sales tax. Paddle acts as a separate controller for the payment data it collects. | United Kingdom (EU adequacy decision) | Data Sharing Addendum |
| Netlify, Inc. | Hosting this website (inkvoice.app), including the plugin vote endpoint and its store of hashed vote identifiers | United States (Data Privacy Framework) | DPA |
| Functional Software, Inc. (Sentry) | Error reports from the Inkvoice Cloud backend. Before sending, request data is stripped of common personal fields (such as emails, names, addresses, tax IDs, passwords, and card data) and cookies. | United States (DPA includes SCCs) | DPA |
| Slack Technologies, LLC | Internal notifications to us: new workspace sign-ups (workspace name and URL, owner email, sign-in method, plan) and messages sent through the in-app feedback form (with the sender's username, the page, and the browser user agent) | United States (DPA includes SCCs) | DPA |
| Optional sign-in, only if you choose to sign in with Google: Google confirms who you are and shares your name, email address, and account ID with us. Google acts as a separate controller. | Global (separate controller) | Privacy Policy | |
| Microsoft | Optional sign-in, only if you choose to sign in with Microsoft: Microsoft confirms who you are and shares your name, email address, and account ID with us. Microsoft acts as a separate controller. | Global (separate controller) | Privacy Statement |
| Apple | Optional sign-in, only if you choose to sign in with Apple: Apple confirms who you are and shares your name, email address, and account ID with us. Apple acts as a separate controller. | Global (separate controller) | Privacy Policy |
Change notifications
To receive email notifications of new subprocessors, write to support@inkvoice.app. Notifications are sent at least 30 days before a new subprocessor is engaged.