Subprocessors
Last updated: [BLANK: publication date]
To provide Dolfinn, we use the third-party service providers ("subprocessors") below. Each is bound by a data processing agreement and processes personal data only on our instructions. Where a subprocessor is outside the EU, transfers are covered by EU Standard Contractual Clauses and/or the EU-U.S. Data Privacy Framework.
| Subprocessor | Service provided | Data processed | Location / transfer |
|---|---|---|---|
| Neon | Database hosting | All account and production data | Frankfurt, EU |
| Vercel | Application hosting & content delivery | All application traffic; server logs | Compute in Frankfurt (fra1); Vercel Inc. is US-based — control-plane/logging/support access may occur in the US (SCCs / EU-U.S. DPF) |
| Resend | Transactional email (password resets, invitations) | Recipient name & email; email content | United States (SCCs / EU-U.S. DPF) |
| Stripe | Payments & subscription billing (only when billing is enabled) | Billing contact, subscription identifiers; card data handled directly by Stripe | United States (SCCs / EU-U.S. DPF) |
| Mistral AI | AI-assisted extraction of scenes/characters from uploaded scripts | Script content (may include personal data) | France, EU |
Cookieless analytics: We also use Vercel Analytics and Vercel Speed Insights, provided by Vercel, which are cookieless and process no personal data.
Changes and notification
We will update this page when we add or replace a subprocessor. [BLANK: If you offer advance notice to customers under the DPA — e.g. "Customers may subscribe to notifications of changes by contacting privacy@dolfinn.be" — state the mechanism and notice period here.]
Contact
Questions: [BLANK: privacy@dolfinn.be].