Legal

Subprocessors

Last updated 25 September 2026

These are the providers that process personal data on Vizitka's behalf, and what each of them does. The list applies both to the data we hold as a controller (described in the Privacy Policy) and to the data we process for customers as their processor (under the Data Processing Agreement). We add a provider here, and tell account holders, at least 30 days before it starts processing customer data.

Providers in use

Provider

What it does for us

Location of processing

Transfer safeguard

Hetzner Online GmbH, Gunzenhausen, Germany

Hosting of the service

Germany and Finland

None needed: European Union

Cloudflare, Inc., San Francisco, United States

Delivery of every address we serve and protection against attacks; storage of uploaded files

Global network

EU-U.S. Data Privacy Framework; Standard Contractual Clauses in Cloudflare's data processing addendum

Functional Software, Inc. (Sentry), San Francisco, United States

Error monitoring: technical details of failing requests

Sentry's European Union data region (Germany)

EU-U.S. Data Privacy Framework; Standard Contractual Clauses in Sentry's data processing addendum

Brevo (Sendinblue SAS), Paris, France

Delivery of the service email we send (notifications, account messages)

European Union

None needed: European Union

GitHub, Inc., San Francisco, United States

Records the feature requests coding agents send us

United States

EU-U.S. Data Privacy Framework; Standard Contractual Clauses in GitHub's data protection agreement

Google Ireland Limited and Google LLC

Google Workspace, which hosts our business mailboxes; Google Fonts, which serves the typefaces on our pages; Google Analytics and Google Tag Manager on vizitka.app, loaded after consent

European Union; United States

EU-U.S. Data Privacy Framework; Standard Contractual Clauses in Google's data processing terms

Not a processor, but worth knowing

Meta Platforms Ireland Limited provides Instagram Login. When you sign in, Meta processes your data as an independent controller under Meta's own terms and privacy policy, and sends us the profile data the Privacy Policy describes. Meta is not our processor.

A coding agent you connect is run by its own provider (for example Anthropic or OpenAI). It reads your sites at your instruction, under that provider's terms. It is your provider, not our subprocessor.

Planned

Provider

What it will do

Status

Payment provider (not chosen yet)

Payment processing and invoicing for paid plans, as merchant of record or payment processor

Not in use until paid plans launch; this page and the checkout will name it first

Changes

We keep this page current. If you object to a new provider on reasonable data protection grounds, the Data Processing Agreement explains what you can do. Questions: [email protected].