Subprocessors & Transfers
Everyone who processes data on our behalf, and where.
The operator has not yet published: legal entity name, registered address, governing law / jurisdiction, legal contact address, privacy contact address. Each missing item is marked in the text below. Until they are published this service should not be taking money from the public.
Everyone who processes personal data on our behalf, what they get, and where they are. Ticked entries are active on this deployment; the rest are wired but not switched on.
| Who | What for | What they receive | Where |
|---|---|---|---|
| Amazon Web Services | Hosting, storage, the call relay | Everything stored by the Service | United States |
| Stripe | Payments, payouts, subscriptions | Card details (never reaching us), amounts, buyer/seller identifiers | United States, and Stripe's own sub-processors |
| Browser push services (Apple, Google, Mozilla) | Waking your phone for a call or message | An opaque subscription endpoint and encrypted payload | Varies by vendor |
| LiveKit | Carrying large meetings (only meetings a Business host chose to make large) and lives | The audio and video of the meeting or live as it happens (not stored), and each person's username, display name and network address | LiveKit's servers nearest the people in the meeting, which may be outside the United States |
| Google Translate | Optional in-app translation, only when you tap translate | The text you chose to translate | United States |
| Anthropic / AWS Bedrock | Optional listing assistant that drafts a listing from your photo | The photo and text you submit to it | United States |
The translation caveat, said plainly
Tapping translate sends that message's text to a third party, in the clear, so a company that had no part in your conversation receives it. The app asks first and sends only what you selected. This is worth a moment's thought even though messages here are not end-to-end encrypted to begin with: it widens who holds a copy from us to them.
The AI caveat
The listing assistant is used only on the Sell screen and only on what you give it. Your conversations are never sent to an AI provider. Nothing you submit is used to train a model.
International transfers
Where personal data of people in the EEA or UK reaches the United States, the transfer relies on the Standard Contractual Clauses together with the processor's own certification where it holds one. Outstanding: our own SCC module with each processor, and a transfer impact assessment, are not yet completed and executed. They are required before marketing this service in the EEA, and are listed here rather than implied to exist.
Changes
New sub-processors are added to this page before they start processing.
What has changed
24 September 2026 · version 5
- LiveKit now also carries lives (one person broadcasting to their contacts and followers).
24 September 2026 · version 4
- Added LiveKit, which carries the audio and video of large meetings.
20 September 2026 · version 3
- The translation caveat no longer rests on a claim of end-to-end encryption — see the correction in Privacy.
29 August 2026 · version 2
- Added the object-storage provider now holding photos and voice notes.
12 July 2026 · version 1
- First published.