Legal
Sub-processors
Last updated:
These are the service providers that ZincirX Inc. uses to run Karbonet and that can come into contact with personal data while doing so. The page belongs to the Data Processing Agreement.
Current list
| Provider | What it does for us | Location |
|---|---|---|
| Stripe, Inc. Privacy information — Stripe, Inc. (opens in a new tab) | Payment processing, subscription billing, invoices and the self-service billing portal. Receives the billing contact, company name, billing address, tax ID and payment details that the customer enters on Stripe’s own pages. | United States |
| Hostinger International Ltd. Privacy information — Hostinger International Ltd. (opens in a new tab) | Rents us the server that runs the application, its database and file storage. All workspace data is stored there. | Germany (Frankfurt) |
| Hostinger International Ltd. Privacy information — Hostinger International Ltd. (opens in a new tab) | Delivers the e-mails the app sends, such as sign-in links, address verification, team invitations and notices to workspace owners. Receives the recipient’s e-mail address and the message content. | Lithuania, Netherlands, Cyprus or United Kingdom |
What is not on the list, and why
- The blockchain network and the network access point we use to reach it. They receive 32-byte hashes from our server and no personal data. The Privacy Policy describes exactly what is written.
- Font, script or content delivery networks. We use none: fonts, scripts and styles are served from our own domain.
- Google Analytics (Google LLC, USA), which measures the use of our own website for us, only for visitors who accept it in the cookie banner and never on the pages that show a workspace’s records. It does not process customer content on your behalf, so it is not a sub-processor; the Privacy Policy describes it. We use no advertising services.
- Suppliers, auditors, webhook destinations and any third party you contact through the app. You choose whether to share data with them; they do not act for us.
Changes to the list
Before a new sub-processor starts processing customer personal data, we update this page and e-mail workspace owners at least 30 days in advance. The Data Processing Agreement explains how to object.