Sub-processors
Last updated: 2 November 2026
Draft — pending legal review
This document is a working draft and has not yet been reviewed by a lawyer. Text in [SQUARE BRACKETS] is a placeholder that will be completed before Altanik accepts paid customers.
Altanik uses the service providers below to host and run the Service. Each processes personal data only on our instructions and under a data processing agreement. We give at least 30 days’ notice before adding or replacing a sub-processor. To receive notices by email, write to [CONTACT EMAIL].
Current sub-processors
| Sub-processor | Purpose | Processing location | Safeguard |
|---|---|---|---|
| Hostinger International Ltd (Cyprus) | Application and database hosting (virtual private server) | Frankfurt, Germany (EU) | EU processing; DPA |
| Our object-storage provider [STORAGE PROVIDER] | Storage of uploaded files and encrypted backups | EU region | DPA; [SAFEGUARD — SCCs if the provider is headquartered outside the EU] |
| Cloudflare, Inc. (USA) | Content delivery, static hosting, DNS, security filtering and cookieless web analytics | Global edge network | EU–US Data Privacy Framework and Standard Contractual Clauses |
| Brevo (Sendinblue SAS, France) | Transactional email (sign-in, security and notification emails) | EU | EU processing; DPA |
| Paddle.com Market Ltd (UK) | Checkout, subscriptions, invoicing and sales tax as merchant of record | United Kingdom and EU | UK adequacy decision |
Services that receive no user data
Hugging Face / MLC content delivery network — the browser extension downloads AI model files from it. No Altanik user data is sent; as with any download, the network can see the requesting IP address.
A note on Paddle
Paddle is our reseller and merchant of record. For checkout and billing data it acts as an independent controller under its own privacy notice; it is listed here for transparency.
Change log
- 2 November 2026 — initial list published (draft).