indifeed Subprocessors
Last updated: 4 September 2026
indifeed is operated by Bit Monkey Ltd.
We use selected third-party service providers to help us provide and secure indifeed.
Where a provider processes Customer Personal Data on our behalf in connection with the Services, we treat that provider as a Subprocessor and require appropriate contractual data protection obligations.
Our Data Processing Agreement governs our use of Subprocessors.
Current Subprocessors
| Subprocessor | Purpose | Personal Data potentially processed | Processing location |
|---|---|---|---|
| Hetzner Online GmbH | Production hosting, database infrastructure, backups and object storage | Customer account data, Customer Content, uploaded files, application data and technical logs | Germany and Finland |
| Cloudflare, Inc. | DNS, content delivery, reverse proxy, TLS, web application firewall, network security and AI inference through Cloudflare Workers AI | IP addresses, request metadata, application traffic and Customer Content submitted for AI processing | Cloudflare global infrastructure |
| Functional Software, Inc. (Sentry) | Application monitoring, error reporting and operational diagnostics | Technical metadata, error information, stack traces and limited application information associated with faults | European Union |
| Plus Five Five, Inc. (Resend) | Delivery of authentication, notification and service emails | Email address, name where supplied, email content, delivery metadata and related service information | United States |
Hetzner
We use Hetzner for production compute, databases, backups and object storage.
Our Hetzner infrastructure used to provide indifeed is located in Germany and Finland.
Customer Content stored in Hetzner object storage remains within our selected European storage locations.
Hetzner processes hosted Personal Data on our instructions under a Data Processing Agreement.
Cloudflare
We use Cloudflare to provide network and application security services and to operate AI functionality through Cloudflare Workers AI.
Depending on the functionality being used, Customer Content may be submitted to Workers AI for inference.
Customer Content submitted through Workers AI is not used by Bit Monkey to train general-purpose artificial intelligence models.
As an indifeed architectural policy, Customer Personal Data must not be sent to a new third-party AI provider unless the provider has first been reviewed and this subprocessor register has been updated where required.
Sentry
We use Sentry, configured in its EU region, for production error monitoring and diagnostics.
We configure our use of Sentry to minimise the Personal Data sent to the service.
We do not intentionally send Customer Content to Sentry for monitoring purposes.
Diagnostic information may nevertheless contain limited Personal Data incidentally, for example where Personal Data forms part of an unexpected application error, request or diagnostic context. We therefore treat Sentry as a Subprocessor.
Resend
We use Resend to deliver transactional emails, including authentication messages, service notifications and other operational communications.
Resend may process:
- recipient email addresses;
- recipient names where provided;
- email content;
- message and delivery metadata;
- delivery logs; and
- related webhook information.
Resend's primary data processing and storage takes place in the United States.
Where Personal Data is transferred internationally, the relevant contractual safeguards and transfer mechanisms provided under Resend's Data Processing Agreement apply.
Analytics
We use a self-hosted instance of Umami to produce anonymous usage statistics.
Umami does not use analytics cookies and our configuration does not intentionally collect personally identifiable information.
Analytics information is stored within infrastructure controlled by Bit Monkey.
No analytics information is sent to Umami Software, Inc.
Umami Software, Inc. is therefore not a Subprocessor.
Payment processing
We use Stripe to process subscriptions and payments.
Stripe is not listed as a Subprocessor under our Customer Data Processing Agreement because payment information relates to Bit Monkey's direct commercial relationship with its customers rather than Customer Personal Data processed by Bit Monkey on behalf of those customers.
Depending on the particular processing activity, Stripe may act as:
- a processor acting on Bit Monkey's instructions; or
- an independent controller where Stripe determines its own purposes for processing, including regulatory, payment-network and fraud-prevention activities.
Our Privacy Policy describes our use of payment providers.
Changes to Subprocessors
Customers give Bit Monkey general authorisation to use the Subprocessors listed on this page in accordance with our Data Processing Agreement.
Where reasonably practicable, we will provide at least 14 days' notice before appointing a new Subprocessor that will process Customer Personal Data.
Customers may object during that period on reasonable grounds relating specifically to data protection.
In urgent circumstances, including where a change is necessary to address a security incident, service failure or legal requirement, advance notice may not be possible. We will provide notice as soon as reasonably practicable.
International processing
Where use of a Subprocessor involves a restricted international transfer of Personal Data, we use an appropriate mechanism recognised under applicable data protection law.
Depending on the circumstances, this may include:
- UK adequacy regulations;
- the UK International Data Transfer Agreement;
- the UK Addendum to the European Commission Standard Contractual Clauses;
- Standard Contractual Clauses; or
- another legally recognised safeguard.
Contact
Questions about our Subprocessors or data processing arrangements can be sent to [email protected].
Bit Monkey Ltd
Company number: 17306463
ICO registration number: ZC239561
132a High Street
Bromsgrove
United Kingdom
B61 8ES