1. Overview
SoTech Studio Ltd ("we", "us" or "our") uses a small number of other companies ("Subprocessors") to run the Thrivespace platform ("Platform"). They process personal data for us under our Data Processing Agreement and data protection law.
This page lists every one of them, what they do and where the data is processed.
2. What is a Subprocessor?
A Subprocessor is a company we use that has, or could have, access to data you hold in Thrivespace. Each one is bound by a contract to protect that data and to use it only to provide its service to us.
3. Before we use one
Before we use a new Subprocessor we check:
- Their published security reports and certifications
- How they store, encrypt and delete data
- That a data processing agreement is in place, with Standard Contractual Clauses or the UK Addendum where data leaves the UK
4. Current Subprocessors
Running the Platform
| Company | What for | Where |
|---|---|---|
| Supabase | The database, sign-in and uploaded files | European Union (Ireland) |
| Vercel | Hosting the app and the website | United States |
| Resend | Sending the app's emails, such as invitations and password resets | United States company, sending from the European Union (Ireland) |
| Stripe | Payments and billing. Card details are entered on Stripe's own pages and never reach us | United States |
Understanding and fixing problems
| Company | What for | Where |
|---|---|---|
| Sentry | Reporting errors in the app. Reports leave out people's details, what was typed and cookies | European Union |
| PostHog | Product analytics inside the app, without cookies or names | European Union |
Support
| Company | What for | Where |
|---|---|---|
| Namecheap | Our support, privacy and security email inbox | United States |
| GitHub | Feedback sent from inside the app, including the sender's name, email address and organisation | United States |
5. Changes to this list
When we add or replace a Subprocessor, we will:
- Update this page
- Tell customers who have asked to hear about changes, at least 30 days before the new Subprocessor starts processing your data
- Give you the chance to object
If you reasonably object and we cannot meet the objection, you may end your Subscription under our Terms of Service.
6. Data that leaves the UK
Some Subprocessors are outside the United Kingdom. Where data is transferred abroad, it is protected by Standard Contractual Clauses with the UK Addendum, or by a UK adequacy decision.
7. Hearing about changes
To be told about changes to this list, email privacy@thrivespace.space and we will add you to the list.
8. Contact us
SoTech Studio Ltd
Email: privacy@thrivespace.space