Legal
Subprocessors
Last updated
These are the providers that host and run Nohead and may process personal data for us, as described in the privacy policy. Each is bound by a data processing agreement.
| Provider | What it does | Personal data | Where |
|---|---|---|---|
| Heroku (Salesforce) | Runs the API and its database | All account and customer data, request logs | United States |
| Fly.io | Runs image resizing and search | Customer images and a search index of records | United States |
| Cloudflare | Hosts this website and the web app, runs DNS, sits in front of the API, stores uploaded files (R2), and caches and delivers images and files | Customer files, API requests and responses, visitors’ IP addresses and request logs | Worldwide edge network; files stored in North America |
| Postmark (ActiveCampaign) | Sends sign-in codes and invitations | Email addresses, names, email content | United States |
| Sentry | Error reports from the API and the web app | Internal account and project IDs, browser details | United States |
| Better Stack | Log storage, monitoring and the status page | Request logs, including IP addresses | United States, European Union |
| Stripe | Payments, tax and invoices, as merchant of record, once paid plans are available | Billing contact, payment and tax details | United States, European Union |
| Mintlify | Hosts the documentation at docs.nohead.io | Visitors’ IP addresses and request logs | United States |
We update this page before a new provider starts processing personal data, and announce additions by email. Questions to hello@nohead.io.