Sub-processors
Last updated: 31 October 2026
These are the service providers that may process personal data when TweakTick runs the Service. "Only when used" means the provider receives nothing unless that feature is used.
| Provider | What it does for TweakTick | When | Location |
|---|---|---|---|
| OVH | Hosting: the app server, the database and the isolated screenshot container | Always | Canada (Beauharnois) |
| Cloudflare | DNS, CDN and proxy in front of TweakTick's web addresses: all web traffic to the Service passes through it | Always | Global network |
| Bunny.net | File storage, file delivery (CDN) and video streaming | Always | See the provider's site |
| Amazon Web Services (Amazon SES) | Sending emails: notifications, approval codes, invitations | Always | See the provider's site |
| Sentry | Error tracking (scrubbed of cookies, tokens and email addresses) | Always | See the provider's site |
| Paddle | Payments for monthly plans, add-ons and the Founding licence, as reseller and Merchant of Record | When you pay through Paddle | See the provider's site |
| Razorpay | Payments for monthly plans and the Founding licence | When you pay through Razorpay | India |
| AppSumo | Lifetime licences sold on AppSumo | Only for AppSumo buyers | See the provider's site |
| Mailgun | Rendering email client previews | Only when someone starts an email preview | See the provider's site |
| "Sign in with Google" | Only if you choose to sign in with Google | See the provider's site | |
| Expo | Push notifications to the TweakTick mobile app (passed on to Apple or Google to deliver) | Only when a team member installs the mobile app and allows notifications | See the provider's site |
| Cloudflare R2 | Encrypted off-site backups, and a mirror copy of stored files | Always | See the provider's site |
Not our sub-processors
- AI providers (for example Anthropic, OpenAI, Google or OpenRouter): AI review is off by default. A workspace owner who turns it on picks the provider and adds their own key, so the workspace contracts with that provider directly.
- Integrations a workspace connects (for example Slack, Jira, Linear, Asana, Trello, Notion) and webhooks: the workspace chooses what to send.
- A workspace's own SMTP server, if it sends client emails through its own mail provider.
- YouTube (Google), when an agency reviews a YouTube link. We never send YouTube anything: we don't look the video up and we store only its 11-character id. The video plays in YouTube's own player (youtube-nocookie.com), which loads only after the viewer presses play, and YouTube's terms and privacy policy apply to it.
Changes
We'll update this page and email workspace owners at least 14 days before adding or replacing a sub-processor, as described in the Data Processing Agreement.
Questions: [email protected]