Legal
Subverwerkers
Last updated: August 11, 2026
A current list of the third-party service providers that process personal data on Framebird’s behalf.
About this list
These providers process personal data on Framebird's behalf to help us deliver, secure, support, and improve the Services. When Framebird processes Customer Content as a processor for a customer, a provider on this list may act as a subprocessor.
The list does not include independent controllers, customer-selected authentication or advertising services, software operated by Framebird itself, or tools that do not receive production personal data. Paddle and Lemon Squeezy, for example, act as independent controllers when providing Merchant of Record services and are described separately in our Privacy Policy.
We review this list when our production providers change. For questions about a provider or the safeguards relevant to your data, contact legal@framebird.io.
Cloudflare, Inc.
- Purpose
- Content delivery, security, Pages and Workers hosting, R2 object storage, browser processing, and transactional email.
- Relevant data
- Customer Content and files, email content and recipient addresses, and request, IP address, security, and usage data.
- Processing location
- Global network; storage and processing locations depend on the Cloudflare service and Framebird configuration.
- Privacy terms
- Cloudflare Customer DPA
Hetzner Online GmbH
- Purpose
- Application, API, and media-processing compute, plus hosting for Framebird-operated services, including self-hosted newsletter infrastructure.
- Relevant data
- Account data, Customer Content while processed, application traffic, operational data, and mailing-list contact data.
- Processing location
- European Union / European Economic Area (Framebird-selected data center).
- Privacy terms
- Hetzner data protection information
MongoDB, Inc.
- Purpose
- Managed Atlas database hosting.
- Relevant data
- Account, authentication, profile, and subscription records; structured Customer Content; collaboration and sharing metadata; and service settings.
- Processing location
- European Union (Framebird-selected Atlas region); MongoDB’s DPA and subprocessor arrangements may permit ancillary processing elsewhere.
- Privacy terms
- MongoDB Data Processing Agreement
Upstash, Inc.
- Purpose
- Managed Redis infrastructure for queues and caching.
- Relevant data
- Queued job and cache data that may include identifiers, recipient addresses, and media-processing and operational metadata.
- Processing location
- European Union (Framebird-selected Redis region); Upstash’s DPA and subprocessors may involve ancillary processing elsewhere.
- Privacy terms
- Upstash Data Processing Agreement
Functional Software, Inc. d/b/a Sentry
- Purpose
- Error, performance, and replay diagnostics.
- Relevant data
- User and device identifiers, IP addresses, stack traces, error context, and limited diagnostic user-interface context.
- Processing location
- Germany (Sentry DE data storage region); Sentry may process limited data elsewhere as described in its DPA.
- Privacy terms
- Sentry Data Processing Addendum
PostHog, Inc.
- Purpose
- Consent-controlled product and website analytics.
- Relevant data
- Account and user identifiers, page views, feature and usage events, device, browser, and campaign data, and consent state.
- Processing location
- European Union (PostHog EU Cloud, Frankfurt); transfers may occur as described in PostHog’s DPA.
- Privacy terms
- PostHog Data Processing Agreement
Better Stack, Inc.
- Purpose
- Centralized application and processing logs and reliability monitoring.
- Relevant data
- Request, error, and operational metadata, which may include account, user, or other service identifiers.
- Processing location
- Primarily European Union; Better Stack’s DPA permits processing in the United States and other locations by Better Stack and its subprocessors.
- Privacy terms
- Better Stack Data Processing Addendum
LogSnag
- Purpose
- Operational and security event notifications.
- Relevant data
- Email addresses, user and media identifiers, filenames or object keys, feedback titles, and subscription and security event metadata.
- Processing location
- United States.
- Privacy terms
- LogSnag Privacy Policy
Plunk
- Purpose
- Email automation and contact lifecycle events.
- Relevant data
- Email address, user identifier, locale, subscription and marketing preferences, and plan and event metadata.
- Processing location
- European Union / European Economic Area (Germany); email delivery may transit through other regions as described in Plunk’s DPA.
- Privacy terms
- Plunk Data Processing Agreement
Tidio LLC / Tidio Poland sp. z o.o.
- Purpose
- Consent-controlled customer-support chat.
- Relevant data
- Name, email address, user identifier, plan, chat contents, and device and usage data supplied during support interactions.
- Processing location
- Primarily European Economic Area; support access and transfers to the United States may occur as described by Tidio.
- Privacy terms
- Tidio Data Processing Agreement