Providers (sub-processors)
Parties processing personal data on behalf of Deketox under art. 28 GDPR. List updated on 4 September 2026.
| Provider | Purpose | Location / safeguards | DPA |
|---|---|---|---|
| Vercel Inc. | Site hosting and aggregate statistics (with consent) | USA/EU (standard contractual clauses) | Terms |
| Supabase Inc. | Database and admin-area authentication | EU (project hosted in eu-west-1, Ireland) | Terms |
| Resend, Inc. | Email delivery: newsletter, sign-up confirmations and login codes | USA (standard contractual clauses) | Terms |
| Stripe Payments Europe | Premium subscription payments | EU/USA (standard contractual clauses) | Terms |
| Upstash Inc. | API anti-abuse protection (rate limiting) | EU/USA (configurable region) | Terms |
| GitHub Inc. | Encrypted database backups (max 90 days) | USA (standard contractual clauses) | Terms |
Amazon (affiliate programme) does not process data on our behalf: when you open an affiliate link, Amazon acts as an independent data controller under its own privacy notice.