Sub-processors

These are the companies that process personal data on our behalf when you use app.sendrec.eu. Each entry says what it receives and where it sits, so you can check the list rather than take our word for it. Our data processing agreement commits us to keeping it current.

Infrastructure

Hetzner Online GmbH (Germany) — every server we run. The application, the PostgreSQL database, and the object storage holding your videos, thumbnails and transcripts all sit on machines we rent from Hetzner. The production server is in their Helsinki, Finland region. See Hetzner's privacy policy.

Email

Brevo, operated by Sendinblue SAS (France) — delivers the mail we send: sign-up confirmations, view and comment notifications, workspace invitations, and the newsletter. It receives the recipient's address and the contents of the message. Brevo hosts within the European Union. See Brevo's privacy policy.

Payments

Creem, operated by Armitage Labs OÜ (Estonia) — merchant of record for paid plans. It receives what it needs to take payment, plus an identifier for your account or workspace so we can apply the subscription. Nothing reaches Creem if you only use the free plan. See Creem's privacy policy.

AI summaries

Mistral AI (France) — turns a transcript into a summary, chapter markers and a suggested title. It receives the text of the transcript, never the audio or the video. We call Mistral's European endpoint, so the transcript is processed in the European Union. Mistral may route it through sub-processors of its own under the safeguards its terms describe. See Mistral's privacy policy.

Domain and inbound mail

Cloudflare, Inc. (United States) — answers DNS queries for sendrec.eu and routes mail sent to our @sendrec.eu addresses, including the ones on this site, to the inbox we read. It is not in the path of your videos or your account data: we do not proxy traffic through Cloudflare, and both sendrec.eu and app.sendrec.eu resolve straight to the Hetzner server. See Cloudflare's privacy policy.

API reference

jsDelivr — serves the interface for our API reference at app.sendrec.eu/docs. A browser that opens that page fetches a script from cdn.jsdelivr.net, which sees its IP address. No account data is involved, and no other page on the site or in the application loads anything from it.

This is the one entry here we cannot pin to a company or a country. jsDelivr is a public CDN for open-source packages, served from points of presence worldwide, and its own policy does not name an operating entity. We would rather not have it on this list at all, so we intend to serve that script ourselves and remove it. See jsDelivr's privacy policy.

Things people expect to find here, which are ours

Some parts of SendRec look like third-party services and are not. We run Listmonk for mailing lists, Umami for website analytics, Garage for object storage, and whisper.cpp for transcription, all on the Hetzner server above. None of them is a company we send your data to.

Changes

We will update this page before a new sub-processor starts handling your data, and notify account holders by email. If you object to a new one, you can tell us at privacy@sendrec.eu and cancel before it takes effect.

Contact

Questions about anything on this page: privacy@sendrec.eu.