Last updated:
This page lists the third‑party subprocessors we engage to provide the service.
A “subprocessor” is a third‑party organization that processes personal data on behalf of Cowculator as a Processor.
For details about roles and obligations, see our DPA and Privacy Policy.
1. Change notice
We typically provide at least 15 days’ advance notice before adding or replacing a subprocessor. If you have reasonable objections, please contact us at privacy@cowculator.app or legal@cowculator.app.
2. Current list of subprocessors
| Provider | Description | Regions | Data categories | Legal basis | Policy |
|---|---|---|---|---|---|
| Stripe | Payments, billing | EU/US | Payment metadata, billing information | Contractual obligations; SCC where required | stripe.com/en-lt/privacy |
| Supabase | Database/Auth/Storage | EU/US (per configuration); default region — eu-central-1 |
Account data; submissions/forms (under controller instructions) | Contractual obligations; regional hosting | supabase.com/privacy |
| Cloudflare | CDN/DNS/WAF and network protection | EU/US | Technical data (IP, network logs) | Contractual obligations | cloudflare.com/privacypolicy |
| Telegram (optional) | Notifications | EU/US | Minimal technical message metadata | Service terms | telegram.org/privacy |
Note: the list may vary depending on enabled features.
3. Default storage region
The default hosting region for DB/Auth/Storage used by Cowculator is eu-central-1 (EU). Other transfers may occur due to infrastructure and protection requirements (see the DPA).
4. Questions
Send questions about subprocessors or objections to privacy@cowculator.app.