Hookstride uses third-party infrastructure and integrations to run its site, authenticate users, send email and process payments. A vendor is a personal-data subprocessor only to the extent it processes customer-controlled personal data on Hookstride's behalf. Some vendors instead act independently for a particular function, such as card authorization or federated sign-in.
1. Infrastructure and service providers
- Cloudflare: frontend hosting through Workers and associated network and security services. Cloudflare may process requests, IP addresses and session-related traffic to serve the frontend.
- Contabo: server infrastructure used for Hookstride's backend deployments where configured. Backend processing, databases and queues can run on operator-managed server resources.
- Resend: transactional email delivery for account verification, authentication and support-related messages when email is configured.
- Paystack: payment initiation, verification, refunds and payment-dispute processing for supported checkout purchases. Paystack may act as an independent payment-service provider.
- Google: optional account authentication when a user chooses Google sign-in, governed by Google's applicable service terms.
Provider usage can vary between the development and live environments, or based on features you enable. PostgreSQL and Redis are application technologies that may be self-hosted; their names alone do not identify an independent subprocessor. Contact us to confirm which provider handles a particular dataset or hosting environment before submitting regulated information.
2. Customer-chosen destinations and senders
A webhook receiving URL configured by a customer is selected and controlled by that customer, not appointed by Hookstride as a general subprocessor. Customers remain responsible for the recipient's legal grounds and security practices. External sender providers and apps, including Stripe, GitHub, IoT gateways and user-built adapters, may have their own contractual and privacy terms.
3. Information processed
Depending on their function, service providers may process network logs, account email addresses, authentication metadata, customer event payloads, webhook delivery metadata, payment references or support messages. Hookstride aims to limit access to the minimum necessary for each provider's function.
4. Locations and international transfers
Storage locations and remote-access regions may vary with the actual hosting setup and provider arrangements. This notice does not promise single-country storage or a particular EU, US or Ghana data center. Customers with binding residency requirements should obtain written confirmation before transmitting restricted personal data. Cross-border safeguards are explained in the Data Processing Addendum.
5. Changes and enquiries
We may change or add service providers when necessary for security, resilience, functionality or legal compliance. Material subprocessor changes will be reflected here, with any additional notice required by the relevant agreement or law. If you have an objection or need confirmed details for a regulated workload, send a written request to privacy support.
Questions about these policies?
Send a message through Hookstride Support. Choose billing, security or privacy as appropriate. Never include passwords, API keys, recovery codes, or personal data from an event payload in your message.