We use as few providers as possible and choose them for their security and privacy record. Each processor below acts only on our instructions under a data processing agreement (art. 28 GDPR). We will update this list before adding or replacing a provider.
Processors
| Provider | What it does for us | Data involved | Location | Transfer safeguards |
|---|---|---|---|---|
| Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA | Hosting of our websites; licence servers (Workers); licence database (D1); file storage and downloads; DNS; protection from attacks | Connection data (IP address, user agent); licence, trial and activation records | Global network, USA | EU–US Data Privacy Framework; Standard Contractual Clauses |
| Sendinblue SAS (Brevo), 106 boulevard Haussmann, 75008 Paris, France | Sending trial and licence emails; newsletter list | Email address, language, consent record, delivery statistics | EU (France) | Not needed (EU) |
| GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA | Mirror of product documentation (GitHub Pages); app downloads | Connection data (IP address, user agent) | USA | EU–US Data Privacy Framework; Standard Contractual Clauses |
| [email_host.name] | Our mailbox for support@mokasolutions.dev and hello@mokasolutions.dev | Your emails to us and our replies | [email_host.country] | [email_host.safeguards] |
Independent controllers
These companies process your data for their own purposes and under their own privacy policies:
| Company | Role | Location |
|---|---|---|
| Armitage Labs OÜ (Creem), Rotermanni 14, 10111 Tallinn, Estonia | Reseller and merchant of record: checkout, payment, taxes, invoices, refunds; licence key system | EU (Estonia) |
| Payment providers used by Creem (for example card networks and banks) | Payment processing | as indicated at checkout |
| Apple Inc. (only for apps you obtain from the App Store) | App distribution, purchases, refunds | USA / Ireland |
Our tax adviser receives the accounting records we are required to keep.
Not used
We don't use analytics providers, advertising networks, crash-reporting or telemetry services, data brokers, or social media plug-ins.