Sub-processors
Linqyou · last updated 2026-10-14
These are the third parties that process personal data for Linqyou. Under our Data Processing Agreement we tell customers at least 30 days before adding or replacing one, by email to workspace owners; to be told as well, write to privacy@linqyou.com.
| Sub-processor | Purpose | Where | Transfer safeguard | Data involved |
|---|---|---|---|---|
| Supabase, Inc. (US) | Database, authentication | EU (Frankfurt) | EU-US Data Privacy Framework where certified, otherwise SCCs 2021/914, for support access from outside the EU | All account and analytics data |
| Cloudflare, Inc. (US) | Object storage (R2) for uploaded export files | EU (Western Europe) | EU-US Data Privacy Framework; SCCs 2021/914 | Uploaded export files |
| Vercel, Inc. (US) | Hosting the website and running the application | EU (Frankfurt) for application functions; global edge network for static files | EU-US Data Privacy Framework; SCCs 2021/914 | Every request to the site: IP address, sign-in cookie and the data shown on the page |
| Stripe Payments Europe, Ltd. (Ireland), with Stripe, Inc. (US) | Payments, invoicing, tax | EU and US | EU-US Data Privacy Framework; SCCs 2021/914 | Billing contact details and payment metadata. Card numbers go to Stripe directly. Stripe is also an independent controller for fraud prevention and its legal duties |
| Apify Technologies s.r.o. (Czech Republic) | Collecting public comments under tracked LinkedIn posts; on request, reading one public profile, company page, company posts or job search. The collection programs (Actors) are published by HarvestAPI and run on the Apify platform | Apify platform, which may process data in the US | Apify Data Processing Addendum; SCCs 2021/914 for processing outside the EU | Post addresses, public comment text, commenter name, headline and profile link; the name, headline and profile link of people who reacted to a post; for a read on request, the profile or company link and the public page returned. Apify keeps raw results at most 7 days; we delete them sooner |
| Resend, Inc. (US) | Sending email: sign-in links, reminders, draft and approval emails, weekly prompts. Receiving replies to weekly prompts and mail sent to our own addresses | EU sending region (Ireland) | EU-US Data Privacy Framework; SCCs 2021/914 | Recipient address, email text (which can include the opening of a draft), bounces and complaints; for mail sent to us, the sender, subject and message |
| Emby (api.emby.ai), operated by Absolum, Herengracht 221, 1016 BG Amsterdam, Netherlands [registered legal entity and KvK number] | Writing explanations, chat answers, post ideas, drafts and short messages; choosing labels from fixed lists | EU only | Inside the EU, no transfer. [DPA with zero data retention and no training, signed] | Pre-computed metrics, your own posts, the stories you chose, company profile text, single comments for labelling or replying, and for research the stored profile facts. Never export files, connection lists, private messages or contact details |
Not in use
Error monitoring is prepared in our code but switched off. It will be listed here, with its location and safeguard, 30 days before it processes any data.
What never goes to a sub-processor
Uploaded export files are kept in our own storage (Cloudflare R2 above) and never forwarded raw to anyone else. Connection lists, private messages and contact details are never sent to the AI provider. See AI transparency for what each AI feature sends.
Linqyou is a trade name of Black Ocean Ventures, Vondelstraat 81, 1054 GL Amsterdam, the Netherlands · KvK 96615621 · VAT NL005222045B11 · support@linqyou.com