Subprocessors
Last updated:
Issuelane relies on a handful of other companies to run, and each of them sees some of your data as a result. They are all of them listed below. Each processes only on our instructions and for no purpose of its own, and each is under a written contract that says so. The one exception is Google, which you bring in yourself by choosing to sign in with it, and which answers for its own handling of your Google account.
This is the list the Privacy & Cookie Policy refers to. Nobody else gets your data unless the law requires it.
netcup
- What it does: The server that runs the application: the API, sign-in, the PostgreSQL database, the queue of background jobs and the rate limit counters
- What reaches it: Everything the service processes: your sign-in records, everything you write in a workspace and the consent records; server logs are written there first
- Where it processes: Germany
- If that is outside the EEA: None needed: the server stays inside the EEA, so nothing leaves it
Cloudflare
- What it does: Serving the pages of this website, carrying every request to our server through a tunnel, storing attachments, avatars, exports and the database backups in object storage, and, only with your consent, counting visits
- What reaches it: Request metadata including your IP address, everything sent between your browser and our server, the files you upload, the exports you ask for, backups of the whole database, and, only if you accept the visit statistics, the page address, referrer, browser and device information and the country derived from your IP address
- Where it processes: [TO BE CONFIRMED: region Cloudflare processes in]
- If that is outside the EEA: [TO BE CONFIRMED: transfer mechanism for Cloudflare, if any data leaves the EEA]
Resend
- What it does: Sending all the email the service sends: sign-in links, address confirmation and password reset messages, invitations, notifications, and the messages sent through the contact and access-request forms
- What reaches it: The recipient's email address and the contents of the message, including the name, address and message you type into the contact or access-request form
- Where it processes: [TO BE CONFIRMED: region Resend processes in]
- If that is outside the EEA: [TO BE CONFIRMED: transfer mechanism for Resend, if any data leaves the EEA]
Grafana Labs
- What it does: Collecting the server's logs, metrics and traces, so we can see when something breaks and why
- What reaches it: Server logs, which can contain request paths, IP addresses, error messages and, in a few mail events, an email address; machine metrics such as load and memory; and traces of requests and jobs, which hold timings, route patterns, status codes, request and job identifiers and the type and code of an error, never its message
- Where it processes: Germany (Frankfurt)
- If that is outside the EEA: [TO BE CONFIRMED: transfer mechanism for Grafana Labs, if any data leaves the EEA]
- What it does: Signing you in, when you choose Sign in with Google: it receives the sign-in request and tells us who you are
- What reaches it: The sign-in request. It returns your name, your email address, whether Google has confirmed that address and a link to your profile picture
- Only if: You choose Sign in with Google. Nothing is sent to Google otherwise
- Where it processes: [TO BE CONFIRMED: region Google processes in]
- If that is outside the EEA: [TO BE CONFIRMED: transfer mechanism for Google, if any data leaves the EEA]
When this list changes
Adding a provider, or changing what one of them does, changes the date at the top of this page. If you want to be told before a change takes effect, or you object to a provider on the list, write to privacy@cublya.com and we will answer you.