Legal
Subprocessors
Every third party involved in running sentryq Cloud, what it does, where it runs, and what actually reaches it. This list forms part of the Data Processing Agreement.
Version 2026-09-15. We give at least 30 days' notice by email before adding or replacing a subprocessor. If you object on data protection grounds within that period, we will look for an alternative, and if there is none you may terminate the affected part of the service without penalty.
| Provider | What it does | Where | What reaches it |
|---|---|---|---|
| Hetzner Online GmbH | Servers, databases, object storage and backups. Your workspace runs here. | Germany (EU) | Everything in your workspace: conversations, fans, media, earnings, staff records, and your account data. |
| Fanvue | The platform your creators are on. The CRM reads and writes through its API, and Fanvue bills the subscriptions. | United Kingdom | Whatever your workspace sends and requests on your behalf: messages, media, posts and tracking links. Fanvue already holds this data as the platform of record. |
| Resend | Transactional email — provisioning results, security notices, password resets. | United States | The recipient's email address and the contents of that message. Never workspace data, fan data or credentials. |
| Cloudflare | Authoritative DNS for our domains and your subdomain, and bot protection on signup. | United States (global anycast network) | DNS queries for your hostname, and — when bot protection is enabled — the challenge token and IP address of somebody submitting the signup form. No workspace content passes through it. |
| TelegramOnly when enabled | Operational alerts to our own on-call operators. | United Arab Emirates / global | Fleet messages about infrastructure: a tenant identifier, a job name, an error. No personal data from any workspace. |
| AnthropicOnly when enabled | Optional AI assistance inside a workspace, where an agency switches it on for drafting or summarising. | United States | Only the text an agency chooses to send for a specific request. Off by default; nothing is sent unless the feature is enabled. |
Hetzner Online GmbH
Germany (EU)
Servers, databases, object storage and backups. Your workspace runs here.
Receives: Everything in your workspace: conversations, fans, media, earnings, staff records, and your account data.
Fanvue
United Kingdom
The platform your creators are on. The CRM reads and writes through its API, and Fanvue bills the subscriptions.
Receives: Whatever your workspace sends and requests on your behalf: messages, media, posts and tracking links. Fanvue already holds this data as the platform of record.
Resend
United States
Transactional email — provisioning results, security notices, password resets.
Receives: The recipient's email address and the contents of that message. Never workspace data, fan data or credentials.
Cloudflare
United States (global anycast network)
Authoritative DNS for our domains and your subdomain, and bot protection on signup.
Receives: DNS queries for your hostname, and — when bot protection is enabled — the challenge token and IP address of somebody submitting the signup form. No workspace content passes through it.
Telegram
United Arab Emirates / global · only when enabled
Operational alerts to our own on-call operators.
Receives: Fleet messages about infrastructure: a tenant identifier, a job name, an error. No personal data from any workspace.
Anthropic
United States · only when enabled
Optional AI assistance inside a workspace, where an agency switches it on for drafting or summarising.
Receives: Only the text an agency chooses to send for a specific request. Off by default; nothing is sent unless the feature is enabled.