A sub-processor is a company we use that may handle personal data on behalf of the businesses using PinkLinq. We keep this list complete, and we'll tell Owners at least 30 days before adding or replacing one, as our Data Processing Addendum explains.
Always in use
| Company | What it does for us | What it can see | Where |
|---|---|---|---|
| Cloudflare, Inc. | Runs the whole app: hosting, databases, file storage, e-mail sending, call relay, network security | All company data, encrypted at rest | United States and Cloudflare's global network |
Used when a feature is in use
| Company | What it does | What it can see | When |
|---|---|---|---|
| Apple Inc. | iPhone push notifications, and App Store subscriptions | Device token and notification text, unless the company hides previews. For subscriptions, the transaction, not who the people are | When someone uses the iPhone app, or subscribes through it |
| Google LLC | Android push notifications through Firebase Cloud Messaging; sign-in with Google, when offered | Device token and notification text, unless the company hides previews; for sign-in, your e-mail address | When a device signed in on Android gets notifications, or someone chooses Google sign-in |
| Microsoft Corporation | Sign-in with Microsoft, when offered | Your e-mail address | When someone chooses Microsoft sign-in |
| Stripe, Inc. | Card payments | The Owner's billing details and the company's plan. Never team data | Once card payments are on, for a company paying by card |
| Anthropic, PBC | The AI assistant | The question asked and the knowledge base articles used to answer it, or text someone asks it to rewrite | Only if the company's Owner turns the module on. See our AI Terms |
On standby
Resend and SendGrid are other e-mail providers our code can switch to if our main one fails. Neither is in use today. If we start using one, it's a change we'd give notice of.
Services your company chooses to connect
These aren't our sub-processors: they work for your company, on your company's instructions, under their own terms. Data goes to them only if your company connects them.
| Service | What happens |
|---|---|
| Gusto | Connecting a Gusto account lets hours and people move to it. Not generally available yet: our integrations page says where it stands |
| Connecteam | A company moving from Connecteam can bring its people and history across, using its own Connecteam API key |
| YouTube | A company may put a YouTube video in a course. It plays in a privacy-enhanced frame, and YouTube sees the viewer's connection |
Other requests your browser or our server makes
None of the following handle your company's records, but they are outside companies, so we list them:
| Service | What it sees | When |
|---|---|---|
| OpenStreetMap (map pictures and the Nominatim address lookup) | The address an admin types, and the map area and connection of whoever is viewing a store's map | Setting up a store's location |
| Google Fonts | Your connection, when your browser downloads the fonts | Loading the app or website |
Staying current
The date at the top of this page changes when this list does. To be told about changes, keep your Owner's e-mail address current: that's where notices go.