Subprocessors
Updated:
These are the third-party providers that may process personal data when we provide Shager. They are bound by written agreements that protect the data at least as well as our Data Processing Addendum.
Current subprocessors
| Provider | What it does | Data involved | Location |
|---|---|---|---|
| Hetzner Online GmbH | Server hosting, storage and backups | All service data, stored on our servers | Germany (company); servers in Helsinki, Finland (EU) |
| Anthropic PBC | AI writing assistant | Only text a user chooses to send to the assistant | United States |
| Internet Security Research Group (Let's Encrypt) | TLS certificates for encrypted connections | No personal data, only our domain names | United States |
| GoDaddy | DNS for our domain | No personal data, only DNS records | United States |
Planned
| Provider | What it will do | Status |
|---|---|---|
| Transactional email provider | Sending sign-in, approval and notification emails | Not in use yet. It will be listed here before we start using it. |
| SMS / WhatsApp messaging provider | Sending approval links by SMS or WhatsApp, if the agency chooses to | Not in use yet. It will be listed here before we start using it. |
Not subprocessors: the social networks
Meta Platforms (Facebook, Instagram) and Google (YouTube), and later TikTok and LinkedIn, receive the content you choose to publish, sent to the accounts you choose. They are destinations picked by you, not providers working for us, and their own terms and privacy policies apply.
Changes
We will update this page and notify customers who have accepted the DPA at least 30 days before a new subprocessor starts processing personal data. If you have a reasonable data protection objection, write to yaniv.presler@gmail.com within that period. The process is described in the DPA.
Self-hosted installations are run by the customer, who chooses its own providers. This list does not apply to them.