Legal
Sub-processors
Version 1.1 · Last updated 13 October 2026
These providers process Customer Data, such as the emails you send to Qotery, on our behalf to run the Service. Each is bound by data protection terms with us.
Current sub-processors
Hetzner Online GmbH
- Purpose
- Hosting of the Qotery application and its file storage
- Data
- All Customer Data passing through the Service, and server logs
- Location
- Germany (EU)
- Transfer safeguard
- UK adequacy regulations (EEA)
PlanetScale, Inc.
- Purpose
- Managed database
- Data
- Account data and Customer Data stored in the database: emails, quote requests, rate sheets, settings
- Location
- Frankfurt, Germany (EU); support access from the United States
- Transfer safeguard
- Storage in the EEA under UK adequacy regulations; any access from the United States under UK adequacy regulations (the UK Extension to the EU-US Data Privacy Framework) where the provider is certified, otherwise the UK International Data Transfer Addendum to the EU Standard Contractual Clauses
OpenAI OpCo, LLC
- Purpose
- AI processing: classifying emails, extracting shipment details and drafting replies
- Data
- Content of emails you forward, paste or open with the Outlook add-in, and shipment details
- Location
- United States
- Transfer safeguard
- UK adequacy regulations (the UK Extension to the EU-US Data Privacy Framework) where the provider is certified, otherwise the UK International Data Transfer Addendum to the EU Standard Contractual Clauses
Clerk, Inc.
- Purpose
- Sign-in, user accounts and franchise (organisation) membership
- Data
- Names, email addresses, Microsoft account identifiers, sign-in and session metadata
- Location
- United States
- Transfer safeguard
- UK adequacy regulations (the UK Extension to the EU-US Data Privacy Framework) where the provider is certified, otherwise the UK International Data Transfer Addendum to the EU Standard Contractual Clauses
Stripe Payments UK Ltd and Stripe Payments Europe, Limited
- Purpose
- Payments, subscriptions, invoices and tax calculation
- Data
- Billing contact, billing address, VAT number, payment method (held by Stripe), usage counts
- Location
- United Kingdom, EU and United States
- Transfer safeguard
- UK adequacy regulations (the UK Extension to the EU-US Data Privacy Framework) where the provider is certified, otherwise the UK International Data Transfer Addendum to the EU Standard Contractual Clauses
Postmark (ActiveCampaign, LLC)
- Purpose
- Receiving emails forwarded to your Qotery address, and sending service emails
- Data
- Content, headers and addresses of forwarded emails; recipients of service emails
- Location
- United States
- Transfer safeguard
- UK adequacy regulations (the UK Extension to the EU-US Data Privacy Framework) where the provider is certified, otherwise the UK International Data Transfer Addendum to the EU Standard Contractual Clauses
| Sub-processor | Purpose | Data | Location | Transfer safeguard |
|---|---|---|---|---|
| Hetzner Online GmbH | Hosting of the Qotery application and its file storage | All Customer Data passing through the Service, and server logs | Germany (EU) | UK adequacy regulations (EEA) |
| PlanetScale, Inc. | Managed database | Account data and Customer Data stored in the database: emails, quote requests, rate sheets, settings | Frankfurt, Germany (EU); support access from the United States | Storage in the EEA under UK adequacy regulations; any access from the United States under UK adequacy regulations (the UK Extension to the EU-US Data Privacy Framework) where the provider is certified, otherwise the UK International Data Transfer Addendum to the EU Standard Contractual Clauses |
| OpenAI OpCo, LLC | AI processing: classifying emails, extracting shipment details and drafting replies | Content of emails you forward, paste or open with the Outlook add-in, and shipment details | United States | UK adequacy regulations (the UK Extension to the EU-US Data Privacy Framework) where the provider is certified, otherwise the UK International Data Transfer Addendum to the EU Standard Contractual Clauses |
| Clerk, Inc. | Sign-in, user accounts and franchise (organisation) membership | Names, email addresses, Microsoft account identifiers, sign-in and session metadata | United States | UK adequacy regulations (the UK Extension to the EU-US Data Privacy Framework) where the provider is certified, otherwise the UK International Data Transfer Addendum to the EU Standard Contractual Clauses |
| Stripe Payments UK Ltd and Stripe Payments Europe, Limited | Payments, subscriptions, invoices and tax calculation | Billing contact, billing address, VAT number, payment method (held by Stripe), usage counts | United Kingdom, EU and United States | UK adequacy regulations (the UK Extension to the EU-US Data Privacy Framework) where the provider is certified, otherwise the UK International Data Transfer Addendum to the EU Standard Contractual Clauses |
| Postmark (ActiveCampaign, LLC) | Receiving emails forwarded to your Qotery address, and sending service emails | Content, headers and addresses of forwarded emails; recipients of service emails | United States | UK adequacy regulations (the UK Extension to the EU-US Data Privacy Framework) where the provider is certified, otherwise the UK International Data Transfer Addendum to the EU Standard Contractual Clauses |
Changes to this list
We give at least 14 days’ notice before a new sub-processor starts processing Customer Data, by updating this page and emailing account administrators, as set out in our Data Processing Addendum. Questions or objections go to privacy@qotery.com.