Subprocessors

List of third-party service providers (subprocessors) that process personal data on our behalf.

Heffl Ventures - LLC uses various third-party service providers (subprocessors) to help us deliver our services. These subprocessors process personal data on our behalf and are contractually bound to protect your data in accordance with applicable data protection laws, including GDPR.

All subprocessors are required to:

Process data only according to our instructions
Implement appropriate security measures
Comply with applicable data protection laws
Not use data for their own purposes

We maintain Data Processing Agreements (DPAs) with all subprocessors. For more information about how we process data, please see our Data Processing Agreement and Privacy Policy.

List of Subprocessors

Subprocessor	Purpose	Data	Location	Reference
Vercel	Server hosting & infrastructure	IP, Browser & Device Information, Application data	US/EU	DPA
PlanetScale	Database hosting & infrastructure	Database records, Application data, User data	EU	DPA
Google Analytics / Google Tag Manager	Website analytics	Anon. IP, Browser & Device Information, Usage data	US	Privacy Policy
PostHog	Product analytics & user behavior tracking	Anon. IP, Browser & Device Information, Usage data, User events	EU	Privacy Policy
Stripe	Payment processing	Billing Information, Payment details	US	DPA
Featurebase	Customer feedback & support	User feedback, Support tickets, Email addresses	EU	Privacy Policy
Sanity	Content management system	Content data, User preferences	EU	DPA
Email Service Providers	Email sending & transactional emails	Email addresses, Email content	US/EU	DPA
DigitalOcean	Cloud infrastructure & hosting	Application data, User data, Infrastructure logs	EU	DPA

Updates to Subprocessors

We may add or change subprocessors from time to time. We will update this page to reflect any changes. If you have questions about our subprocessors or wish to be notified of changes, please contact us at [email protected].

For customers with specific subprocessor requirements or restrictions, please contact us to discuss how we can accommodate your needs.

Data Transfers

Some of our subprocessors may process data outside the EU/EEA/UK. When we transfer data to countries that are not considered to have adequate data protection laws, we ensure appropriate safeguards are in place, including: