Sub-processors and other data recipients Last updated October 1, 2026 These providers support the Neon Deer platform at app.neondeerdata.com, our website at neondeerdata.com, and the business services identified below. Platform subprocessors act on our behalf for the tasks listed. Website vendors, payment providers, and customer-connected services are listed separately because their roles differ. Our DPA (/dpa/) governs authorization and changes to platform subprocessors; our Privacy Policy (/privacy/) explains our broader handling of personal data. Locations identify primary hosting or the provider's processing footprint. Providers may also use support teams and subprocessors in other countries; these entries do not promise exclusive data residency. ## Platform hosting, sign-in, AI, and communications Neon (Databricks) Purpose: Platform database What it receives: CRM records, workflow lookup values, account information, and other platform data Location: United States (Northern Virginia) Privacy policy: https://neon.com/privacy-policy Hetzner Purpose: Application hosting What it receives: Platform requests and data while processed, plus server logs that can include user and workspace identifiers Location: Ashburn, Virginia, United States; EU support Privacy policy: https://www.hetzner.com/legal/privacy-policy/ Cloudflare Purpose: Traffic delivery and protection What it receives: Platform traffic, IP addresses, browser information, and sign-in security signals Location: Worldwide edge network Privacy policy: https://www.cloudflare.com/privacypolicy/ Clerk Purpose: Sign-in and accounts What it receives: Name, email address, sign-in details, sessions, and organization memberships Location: United States Privacy policy: https://clerk.com/legal/privacy Anthropic Purpose: AI assessments What it receives: CRM fields, permitted related-record information and notes sent for assessment, and generated responses Location: United States storage; processing in the United States, Europe, Asia and Australia, with support, safety review and incident response in countries where Anthropic or its affiliates operate; no exclusive residency commitment Privacy policy: https://www.anthropic.com/legal/privacy OpenAI (OpenAI OpCo, LLC) Purpose: AI assessments What it receives: CRM assessment inputs and outputs Location: United States and other countries in OpenAI’s subprocessor schedule; no exclusive residency commitment Privacy policy: https://openai.com/policies/privacy-policy/ Google LLC (Gemini API Paid Services) Purpose: AI assessments What it receives: CRM assessment inputs and outputs Location: Countries where Google or its agents maintain facilities; no exclusive residency commitment Privacy policy: https://policies.google.com/privacy Sentry Purpose: Error monitoring What it receives: Filtered error reports and diagnostic information; filtering does not guarantee removal of all personal data Location: United States storage; Austria, Canada, and Netherlands service/support Privacy policy: https://sentry.io/privacy/ Postmark Purpose: Notification email What it receives: Recipient addresses, email content, and delivery information Location: United States Privacy policy: https://postmarkapp.com/privacy-policy ## Our domain-check service Checkredirects.io is operated by Neon Deer Data Labs Inc., the same legal entity as this platform. It receives company website domains and non-personal-email-provider domains from CRM email addresses to check redirects. It does not receive complete email addresses or CRM records for these checks. Websites contacted during a check receive the requested address and the checking service’s connection information. Its primary hosting and storage are in Virginia, United States. Any separate providers processing this information for us remain subject to the DPA's subprocessor requirements. Privacy policy (https://checkredirects.io/privacy/). ## Merchant of record Polar is the merchant of record and authorized reseller for platform subscriptions. It handles checkout, payments, subscription billing, and applicable sales taxes. Purchases are subject to Polar's buyer terms (https://polar.sh/legal/checkout-buyer-terms) and privacy policy (https://polar.sh/legal/privacy-policy); Neon Deer provides the platform. Polar Purpose: Merchant of record What it receives: Purchaser, billing, subscription, and invoice information; payment details supplied at checkout Location: United States Privacy policy: https://polar.sh/legal/privacy-policy ## Consulting payments We use Stripe to issue consulting invoices and process payments for consulting services. Stripe receives the customer contact, billing, invoice, and transaction information needed to provide these services, along with payment details supplied when paying. See Stripe’s Privacy Policy (https://stripe.com/privacy). ## Website providers Plausible Analytics Purpose: Website analytics What it receives: Page URL, referrer, browser/device information, and IP address used to derive visit statistics; no cookies Location: EU (Germany) Privacy policy: https://plausible.io/privacy Rampify Purpose: Website analytics What it receives: Browser visits and referrals, with a temporary session identifier; automated-traffic request details without the visitor IP address being forwarded Location: Not published by provider Privacy policy: https://www.rampify.dev/privacy Netlify Purpose: Website hosting What it receives: Server logs: IP address, browser type, referrer, and requested path Location: Worldwide edge network; serverless functions in Ohio, United States Privacy policy: https://www.netlify.com/privacy/ Fillout Purpose: Contact forms What it receives: Submitted information and browser or device information when the form loads Location: United States Privacy policy: https://www.fillout.com/privacy-policy Cal.com Purpose: Meeting scheduling What it receives: Name, email address, meeting time, and booking details Location: United States Privacy policy: https://cal.com/privacy YouTube Purpose: Embedded videos What it receives: Browser request information when a video loads; viewing data when a visitor plays a video Location: Worldwide Privacy policy: https://policies.google.com/privacy Google Fonts Purpose: Website font What it receives: IP address and browser information when the font loads Location: Worldwide Privacy policy: https://policies.google.com/privacy ## Customer-selected destinations Customers authorize us to access and update records in their Attio accounts. Attio provides its CRM under a separate agreement with the customer and is not our subprocessor for that service. Details of Attio's data handling are in its Privacy Policy (https://attio.com/legal/privacy-policy) and Data Processing Addendum (https://attio.com/legal/attio-data-processing-addendum). ## Changes to this list - September 30, 2026: First publication of this list, covering the Neon Deer platform (app.neondeerdata.com) and neondeerdata.com. We email notice of new or replacement platform subprocessors as required by the DPA. Updating this page alone does not replace that notice. ## Contact DPA matters: legal@neondeerdata.com. Privacy requests: privacy@neondeerdata.com.