Policies

Subprocessors

The companies that help us run Anacoic, what they do, and where.

Last updated: October 25, 2026

These companies process personal data on our behalf so we can run Anacoic. We tell customers by email at least 30 days before we add or replace one (see section 7 of our Data Processing Addendum). To get these notices, keep your account owner’s email up to date.

Where data is processed

Our providers process data in data centres in the EU and/or the United States. Some also have staff or support teams outside the European Economic Area (EEA). Whenever personal data is transferred outside the EEA, the transfer relies on the EU Standard Contractual Clauses (SCCs) or, where the provider is certified, the EU–US Data Privacy Framework (DPF).

Service providers we use today

CompanyWhat they do for usData involvedWhen
Cloudflare, Inc.Hosting the website, the app and the gateway (Workers, Pages); databases and storage (D1, KV, Durable Objects); background jobs (Queues); DNS, security and bot protection (including Turnstile); sending our emails (Email Sending: alerts, reports and account emails); and receiving mail to our @anacoic.com addresses (Email Routing)All service data: account, organization and site data; gateway events while they’re delivered; recent delivery log entries (identifier names, not values); daily counters; website traffic; recipient email addresses and email contentAlways
Stripe, Inc. / Stripe Payments Europe, Ltd.Payments and invoices for paid plansBilling contact; payment details (held by Stripe, never by us)Once paid plans are switched on
Functional Software, Inc. (Sentry)Error monitoringError reports, which may contain limited technical data (such as browser, page, time and the error itself), set up to leave out tokens, order data and event payloads. Kept for a limited periodOnly if enabled
Google LLC / Google Ireland Ltd.The inbox that our @anacoic.com addresses forward to (Gmail); “Sign in with Google” if you choose itEmail conversations with us; name, email address and profile picture at sign-inAlways (inbox); only if you choose it (sign-in)

GitHub (GitHub, Inc.) is an independent sign-in provider, not our subprocessor: if you choose “Sign in with GitHub”, GitHub tells us your name, email address and profile picture under its own privacy terms.

We’ll update this page, and give the notice described above, before we add or replace a provider, including before turning on one marked “only if enabled”.

Platforms you connect (sent on your instruction)

When you connect a platform or choose it as a destination in Anacoic, we send data to it or read data from it only because you told us to, and only what your settings allow. These platforms work with you under their own terms and privacy policies; you can disconnect them at any time. They are not our subprocessors.

PlatformWhat happens
Meta (Facebook, Instagram)We read dataset diagnostics and event counts; if you turn on delivery, we send your conversion events (identifiers hashed) through the Conversions API
Google (Google Ads, Google Analytics 4)We read conversion diagnostics and daily totals; if you turn on delivery, we send your conversion events
TikTok, Pinterest, Snapchat, LinkedIn and other ad platforms you chooseIf you turn on delivery, we send your conversion events (identifiers hashed)
Shopify, WooCommerce, Stripe (as a store)We receive order facts (no names, contact details or addresses)
SlackWe post alerts to the channel you pick

Our own website

The tags and tools on anacoic.com (Google, Meta, Cal.com, Cloudflare Turnstile) handle data about our own website visitors, not our customers’ data. They are described in section 9 of our Privacy Policy.

Questions

Email [email protected] if you’d like a copy of a provider’s data processing terms or transfer safeguards.