01
Overview
We use subprocessors to host and secure the Service, process payments, send email, provide support, diagnose errors, measure usage where consented to, and support optional AI-assisted or moderation workflows.
These providers process personal data on our behalf and under contractual data protection terms appropriate to their role. We update this page when subprocessors change materially.
02
Subprocessor table
| Processor | Purpose | Data categories | Location | Transfers |
|---|---|---|---|---|
Scaleway Hosting and infrastructure | Hosts application infrastructure, databases, storage, networking, and related operational services. | account data, page data, links, analytics data, logs, support data | France / European Union | EU processing; provider terms and DPA |
Stripe Payment processing | Processes checkout, subscriptions, invoices, tax, fraud prevention, and payment-related customer records. | billing data, contact data, subscription data, payment metadata | European Union / United States / global | DPA, SCCs, and/or EU-U.S. Data Privacy Framework where applicable |
Amazon SES Email delivery | Sends transactional email such as verification, password reset, billing, security, and support messages. | email address, message metadata, delivery events, bounce data, suppression data | European Union / United States | DPA and SCCs where applicable |
Cloudflare Security, DNS, CDN, and bot protection | Provides DNS, CDN, WAF, DDoS protection, bot protection, Turnstile, caching, and edge security. | IP address, request metadata, security events, device data, logs | Global edge network | DPA, SCCs, and/or EU-U.S. Data Privacy Framework where applicable |
Google Ads measurement | Provides optional advertising conversion measurement for to.it.com campaigns. | cookie identifiers, usage data, device data | European Union / United States / global | DPA, SCCs, and/or EU-U.S. Data Privacy Framework where applicable |
Some processors are only used when specific features are enabled, such as payments, optional analytics, support chat, diagnostics, advertising measurement, or AI-assisted workflows.
03
Safeguards and transfers
Where processors handle personal data outside the European Economic Area, we use appropriate safeguards where required, such as Standard Contractual Clauses, adequacy decisions, and, where applicable, participation in the EU-U.S. Data Privacy Framework.
We aim to keep processing limited to what is necessary for each provider's role, such as hosting, authentication, billing, email delivery, security, analytics, support, diagnostics, or abuse prevention.
04
Contact
For questions about subprocessors, data processing, privacy, or transfers, contact contact@to.it.com.
Transparency promise
We list the services that help keep to.it.com running.
This table helps users understand who may process personal data on our behalf and why.