Legal

Subprocessors

Last updated

The providers that help us run Clientwharf, and how we tell you when that list changes.

1. Current subprocessors

Goohoost Ltd (trading as Clientwharf) uses the following 5 providers to deliver the Service. This list was last updated on .

Subprocessors used by Clientwharf
SubprocessorPurposeLocationPrivacy policy
Paddle.com Market Ltd (and affiliates)Merchant of Record: checkout, payments, invoicing, sales tax, refundsUnited Kingdom / United StatesPrivacy policy of Paddle.com Market Ltd (and affiliates) (opens in a new tab)
Vercel Inc.Application hosting and content deliveryUnited States (functions in us-east-1)Privacy policy of Vercel Inc. (opens in a new tab)
Neon Inc. (Databricks)Managed PostgreSQL databaseUnited States (AWS us-east-1)Privacy policy of Neon Inc. (Databricks) (opens in a new tab)
Cloudflare, Inc.File storage (R2), DNS, email routing, network securityUnited States / global networkPrivacy policy of Cloudflare, Inc. (opens in a new tab)
Resend (Plus Five Five, Inc.)Transactional email deliveryUnited States (AWS us-east-1)Privacy policy of Resend (Plus Five Five, Inc.) (opens in a new tab)

Paddle appears here because it receives customer and order data when you subscribe. Paddle acts as our reseller and Merchant of Record, and processes payment data as an independent controller under its own Privacy Notice (opens in a new tab). It does not receive the files and content in your workspace.

2. What a subprocessor is

A subprocessor is a third party we engage to process personal data on behalf of our customers, such as the companies that host our application, database and file storage, and that deliver our emails. Each one is bound by a written agreement with data protection obligations at least as protective as our Data Processing Addendum, and transfers outside the European Economic Area, the United Kingdom and Switzerland are covered by appropriate safeguards such as Standard Contractual Clauses.

3. How we announce changes

  1. At least 30 days before a new subprocessor starts processing customer personal data, we update this page with its name, purpose and location, and change the date above.
  2. We email the owner of every active workspace with a summary of the change.
  3. Customers can object on reasonable data protection grounds by emailing privacy@clientwharf.com within the notice period, as described in the DPA.

In an emergency, for example to replace a provider after a security failure, we may make a change with shorter notice and will inform customers as soon as possible. Removing a subprocessor does not require advance notice, but we will update this page.

4. Questions

For more information about a subprocessor or the safeguards in place, email privacy@clientwharf.com.