Data Processing Agreement / Sub-processors
Sub-processors
Last Updated: 20 February 2026
HookListener uses the following sub-processors to provide the Service. This list is maintained in accordance with Section 6 of our Data Processing Agreement.
Customers will be notified of changes to this list by updating this page. If you wish to receive notifications of changes, please contact us. Customers have 30 days from the date of notification to object to a new sub-processor on reasonable data protection grounds.
| Sub-processor | Purpose | Location |
|---|---|---|
| Hetzner Online GmbH | Infrastructure hosting and object storage | EU (Germany/Finland) |
| PlanetScale, Inc. | Database hosting | EU (Frankfurt) |
| Cloudflare, Inc. | CDN, DDoS protection, and website hosting | Global (EU-adequate) |
| Stripe, Inc. | Payment processing | US (EU-US DPF certified) |
| PostHog | Product analytics | EU |
| Brevo (Sendinblue) | Email delivery and marketing automation | EU (France) |
| AppSignal B.V. | Application performance monitoring and error tracking | EU (Netherlands) |
| GitHub (Microsoft) | Authentication (OAuth) | US (EU-US DPF certified) |
| Google LLC | Authentication (OAuth) | US (EU-US DPF certified) |
| Telegram* | Notification delivery to user-configured channels | Global |
| Reddit, Inc.* | Advertising conversion tracking | US (EU-US DPF certified) |
| Typeform S.L. | Contact and support forms | EU (Spain) |
* These sub-processors only process data when the Customer actively uses the corresponding feature (e.g., Telegram notifications or visits pages with conversion tracking).