Skip to content
shrnq
Draft
← Back to shrnq

Legal

Subprocessors and third parties

Who handles data on our behalf, what they see, and where.

Effective [EFFECTIVE DATE] · Last updated [LAST UPDATED DATE]

Draft: this page is not final. Operator details and legal review are still pending.

These are the third parties that process personal data for us, or that we rely on to run shrnq. Most of this is covered in the Privacy Policy.

VendorRoleDataLocation
Polar Software, Inc.Merchant of Record and payment processor. Sells Pro to you, collects payment and sales tax, issues receipts, handles refunds and disputes.
Independent controller for payment data. Card details never reach shrnq.
Email, name, billing country and address, payment details, subscription status.United States
ResendSends transactional email (verification, password reset, account notices).Recipient email address and the content of the message.United States
[HOSTING PROVIDER]Runs the web app, API and database.All service data described in the Privacy Policy.[HOSTING REGION]
[BACKUP STORAGE PROVIDER]Stores encrypted database backups.A copy of the database.[BACKUP REGION]
GitHub, Inc.Hosts the source code and runs build and deploy automation.No personal data of users.United States
SentryRecords application errors so we can fix them.
Used only while error tracking is switched on.
Error details and request metadata. No passwords or card data.United States
Google Safe BrowsingChecks destination URLs against known-malicious lists when links are created.
Used only while link scanning is switched on.
Destination URLs only. No account data.United States
URLhaus (abuse.ch)Checks destination URLs against a malware URL list.
Used only while link scanning is switched on.
Destination URLs only. No account data.Switzerland

Notes

  • We use no advertising or analytics vendors on shrnq pages.
  • Customers' custom domains point at our infrastructure. Customers are responsible for their own domain registrar and DNS.
  • Link-scanning services receive destination URLs only, never account data. Vendors marked as used "only while switched on" may be inactive at any given time.

Changes

We announce new subprocessors by email or in the app at least 30 days before they start handling personal data. Customers with a Data Processing Addendum may object. Questions: [PRIVACY EMAIL].

shrnq · Abuse: [ABUSE EMAIL]
Report a linkTermsPrivacyCookiesAcceptable useRefundsSubprocessorsCopyright & abuse