The companies that process personal data so COLMINK can run — who they are, what they do for us and where they process it. This page is the always-current list the Privacy Policy refers to. We apply the same standard of protection to every user, wherever in the world they are.
Providers that currently process personal data.
| Provider | Contracting entity | What it does for us | Region & safeguard |
|---|---|---|---|
| OpenStreetMap (Nominatim) | OpenStreetMap Foundation (UK) | Turning a store's public address into map coordinates | EU-operated |
Published in advance as notice: these providers start processing only when the platform moves to its production infrastructure. None of them processes real user data yet.
| Provider | Contracting entity | What it does for us | Region & safeguard |
|---|---|---|---|
| Supabase | Supabase, Inc. (US) | Database (all platform data) | EU region selected; DPA with Standard Contractual Clauses |
| Railway | Railway Corp. (US) | Application hosting (runtime) | EU region selected; DPA with Standard Contractual Clauses |
| Cloudflare | Cloudflare, Inc. (US) | DNS, TLS, firewall and content delivery | Global edge network by design; DPA with Standard Contractual Clauses |
| Cloudflare R2 | Cloudflare, Inc. (US) | File storage (images, private documents, backups) | EU region selected; DPA with Standard Contractual Clauses |
| Resend | Resend, Inc. (US) | Sending transactional and account email | United States; DPA with Standard Contractual Clauses |
| Sentry | Functional Software, Inc. (US) | Error monitoring (with personal data scrubbed) | EU region selected; DPA with Standard Contractual Clauses |
Not our processors: they handle your data under their own privacy policy when you use them (for example to pay).
| Provider | Contracting entity | What it does for us | Region & safeguard |
|---|---|---|---|
| PayPal | PayPal (Europe) S.à r.l. et Cie, S.C.A. (LU) · PayPal, Inc. (US) | Executing subscription payments | Processes under its own privacy policy and safeguards |
When we add or replace a provider, this page is updated and, where the change is material, the Privacy Policy is republished with notice.