Sub-processors
Last updated: 11 November 2026
These are the service providers that may process personal data when TweakTick runs the Service. "Only when used" means the provider receives nothing unless that feature is used.
| Provider | What it does for TweakTick | When | Location |
|---|---|---|---|
| OVH | Hosting and backups: the app server, the database, the isolated screenshot container, our backups kept on the server, and OVH's daily backup of the whole server | Always | Canada (Beauharnois); OVH stores its server backups on separate servers in the same datacentre |
| Grafana Labs (Grafana Cloud) | Monitoring: server logs and metrics. Logs are redacted before they are sent, but may contain IP addresses | Always | India (ap-south-1) |
| Cloudflare | DNS, CDN and proxy in front of TweakTick's web addresses: all web traffic to the Service passes through it. Also the Turnstile "verify you are human" check on sign-up, sign-in code, waitlist and Founding checkout forms | Always | Global network |
| Bunny.net | File storage, file delivery (CDN) and video streaming | Always | Files stored in Germany, with a replica in Sweden; delivery through its global CDN; video: see the provider's site |
| Amazon Web Services (Amazon SES) | Sending emails: notifications, approval codes, invitations | Always | United States (us-east-1) |
| Sentry | Error tracking (scrubbed of cookies, tokens and email addresses) | Always | See the provider's site |
| Paddle | Payments for monthly plans, add-ons and the Founding licence, as reseller and Merchant of Record | When you pay through Paddle | See the provider's site |
| Razorpay | Payments for monthly plans and the Founding licence | When you pay through Razorpay | India |
| AppSumo | Lifetime licences sold on AppSumo | Only for AppSumo buyers | See the provider's site |
| Mailgun | Rendering email client previews | Only when someone starts an email preview | See the provider's site |
| "Sign in with Google" | Only if you choose to sign in with Google | See the provider's site | |
| Google Analytics (Google LLC; Google Ireland Limited for visitors in Europe) | Counting visits to our public website. No advertising features, no Google signals; no analytics cookies for visitors in the EEA, UK and Switzerland. Never loaded in the app or on client review pages, so it receives no workspace or client data | Only on the public website (home, pricing, free tools, help, legal, sign-up and sign-in pages) | United States and other countries (see the provider's site) |
| Expo | Push notifications to the TweakTick mobile app (passed on to Apple or Google to deliver) | Only when a team member installs the mobile app and allows notifications | See the provider's site |
| Cloudflare R2 | Encrypted off-site backups, and a mirror copy of stored files | Only once off-site backups are switched on (not in use on 5 November 2026) | See the provider's site |
Not our sub-processors
- AI providers (for example Anthropic, OpenAI, Google or OpenRouter): AI review is off by default. A workspace owner who turns it on picks the provider and adds their own key, so the workspace contracts with that provider directly.
- Integrations you choose to connect. A workspace owner decides to connect these and what to send, so the data goes to them on the workspace's instructions:
- task and chat tools: Slack, Jira, Linear, ClickUp, Trello, Todoist, Asana, monday.com, Airtable and Notion;
- automation apps: Zapier, Make and n8n (connected with a workspace API key);
- AI assistants connected over MCP;
- webhooks to addresses the workspace sets.
What each one receives is in the Privacy Policy, section 7. The workspace's own agreement with each tool applies.
- A workspace's own SMTP server, if it sends client emails through its own mail provider.
- YouTube (Google), when an agency reviews a YouTube link. We never send YouTube anything: we don't look the video up and we store only its 11-character id. The video plays in YouTube's own player (youtube-nocookie.com), which loads only after the viewer presses play, and YouTube's terms and privacy policy apply to it.
Changes
We'll update this page and email workspace owners at least 14 days before adding or replacing a sub-processor, as described in the Data Processing Agreement.
Questions: support@tweaktick.com