Sub-processors
Last updated: 18 May 2026
The following third parties may process Personal Data on our behalf as part of providing the StyloBot service. We notify customers at least 30 days before adding or replacing a sub-processor.
| Sub-processor | Purpose | Data | Location |
|---|---|---|---|
| Stripe | Payment processing | Billing email, payment method | US (SCC + UK IDTA) |
| Cloudsmith | Package distribution (apt repo, Homebrew tap) | None (public artifacts) | EU |
| Hosting provider (Hetzner) | Compute + Postgres + Keycloak hosting | All customer data | EU |
| Cloudflare | TLS termination, DNS, DDoS protection | Request IPs (in transit only) | Global edge |
| Keycloak (self-hosted) | User identity, MFA, social login broker | Email, password hash, MFA secrets | Same region as hosting |
Notification
To subscribe to sub-processor change notifications, email [email protected] from your account billing email. Notice is also posted on this page at least 30 days before any change takes effect.