Sub-processor list
The providers Kontxs Limited uses to deliver Kontxs.
Version 2026-10-2. Published .
Each provider processes personal information on our instructions under a written data-processing agreement. We remain liable to our customers for their performance. See also our Privacy notice.
For your business’s records, this list is incorporated by Annex 3 of the Data-processing terms. Those terms govern authorisation, notices and objections and prevail if this list conflicts with them. Providers handling only our own controller data are also listed for transparency; their inclusion does not make them processors of your business’s records.
Changes
- This page is updated before a new provider processes personal information.
- Business admins are notified at least 7 days before a provider that processes their business’s records is added or replaced, and may object under our Data-processing terms. Changes that also amend those terms are notified at least 30 days in advance.
- To receive change notices by email, ask to join the sub-processor notices list at privacy@kontxs.com.
- Each provider’s own sub-processors are published at the link shown.
1. Providers that process personal information
Neon, LLC (a Databricks company), United States
- Purpose
- Database.
- Information
- All business records, and Kontxs records other than sign-in data.
- Storage location
- London, United Kingdom.
- Transfer safeguard
- Stored in the UK. For any access from outside the UK: UK Extension to the EU–US Data Privacy Framework, and the UK Addendum to the EU standard contractual clauses in the Databricks data-processing agreement.
- Its sub-processors
- databricks.com/subprocessors
Vercel Inc., United States
- Purpose
- Hosting for the website, web app and API; storage of business logos; performance measurement; automated-abuse detection on the early-access form.
- Information
- All data processed by the service while handling requests; request logs, including IP addresses; logos.
- Storage location
- London, United Kingdom, for the application and stored files. Copies of files may be cached elsewhere on Vercel’s network.
- Transfer safeguard
- UK Extension to the EU–US Data Privacy Framework; UK Addendum to the EU standard contractual clauses in Vercel’s data-processing agreement.
- Its sub-processors
- security.vercel.com
Clerk, Inc., United States
- Purpose
- Sign-in and accounts for the web app and phone apps; business memberships and invitations.
- Information
- Names, email addresses, phone numbers if added, sign-in identities, sign-in and security records, IP addresses, device and browser details, business names and memberships.
- Storage location
- United States.
- Transfer safeguard
- UK Extension to the EU–US Data Privacy Framework; UK Addendum to the EU standard contractual clauses as a fallback.
- Its sub-processors
- clerk.com/legal/subprocessors
Plus Five Five, Inc. (Resend), United States
- Purpose
- Service emails, including notices to business admins and sub-processor change notices.
- Information
- Recipient email addresses, message content, delivery records; the sub-processor notices list.
- Storage location
- United States.
- Transfer safeguard
- UK Addendum to the EU standard contractual clauses in Resend’s data-processing agreement.
- Its sub-processors
- resend.com/legal/subprocessors
Microsoft Ireland Operations Limited, Ireland (Microsoft 365)
- Purpose
- Our email and documents.
- Information
- Email sent to us, including support requests; our business records.
- Storage location
- United Kingdom.
- Transfer safeguard
- Stored in the UK. For any access from outside the UK: UK Extension to the EU–US Data Privacy Framework, and the UK Addendum to the EU standard contractual clauses in Microsoft’s Data Protection Addendum.
- Its sub-processors
- Microsoft Service Trust Portal
Database, application and stored files: London. Sign-in data and email sending: United States. Office email: United Kingdom. All providers are US-owned and may access data from the United States under the safeguards shown.
2. Companies that are not our sub-processors
These companies are involved in providing Kontxs but do not process personal information on our behalf.
| Company | Role | Information received |
|---|---|---|
| Apple Inc. (App Store, TestFlight) | Distributes the iPhone app. Independent controller. | Download, device, usage and crash information Apple collects itself. We send Apple no information from Kontxs. |
| Google LLC (Google Play) | Distributes the Android app. Independent controller. | Download, device, usage and crash information Google collects itself. We send Google no information from Kontxs. |
| Google LLC and Apple Inc. (sign-in) | Sign-in with an existing Google or Apple account, at your choice. Independent controllers. | That you signed in to Kontxs. |
| 650 Industries, Inc. (Expo) | Builds the phone apps and holds their store-signing credentials. Supplier. | Source code and our developer-account details. No customer, staff or account information. |
Any of these companies that begins processing personal information on our behalf will be added to section 1, with notice.
3. Planned providers
Each will be added to section 1, with notice, before it processes personal information.
| Company | Planned use |
|---|---|
| Stripe | Payments and VAT, when paid plans start |