Legal
Sub-processors
The companies that process personal data on Deftro's behalf, what each one does, what it sees, and where it is.
Version 2026-11-10 · Effective
1.Who they are
| Company | What for | What it sees | Where |
|---|---|---|---|
| Vercel | Hosting, server logs, Web Analytics, Speed Insights | Every request: IP address, user agent, the page | United States, with edge locations worldwide |
| Neon | The Postgres database | Everything in the privacy policy that Deftro stores | Singapore |
| Cloudinary | Storing and serving images and ad videos | Uploaded images (avatars, previews, feedback, ads) and ad videos; the IP address of browsers loading them | United States |
| Sign in with Google | Your Google account's name, email and picture, when you sign in with it | United States | |
| GitHub | Sign in with GitHub; importing repositories | Your GitHub name, email, login and picture; repositories you connect | United States |
| Resend | Sending notification email | Your email address and the notification's text | United States |
2.Payments
Sponsored placements will be paid through a payment provider. None has been chosen yet. It is added to this list before it handles any payment, and it, not Deftro, will hold card and bank details.
3.On what terms
Each company processes data only to provide its service to Deftro, under its data processing terms. Transfers out of the EU and UK rely on the Standard Contractual Clauses, or on the EU–US Data Privacy Framework where the company is certified. The privacy policy says more.
4.Changes
When we add or replace a company, this page and its date change first. Ask sales@baton-vault.vercel.app to be told by email.