Current sub-processors
These companies process personal data for us to run Groundcuvva. Each is bound by data protection terms at least as protective as our data processing agreement, and transfers outside the UK use one of the safeguards described there.
| Provider | What they do | Data they handle | Where |
|---|---|---|---|
| Cloudflare, Inc. | Hosting (Workers), network and DDoS protection, file storage (R2): certificates, photos, documents, logos | All requests to the service, including IP addresses; every uploaded file | Global edge network; files in Cloudflare R2’s EU jurisdiction |
| Neon, Inc. (database on Amazon Web Services) | Managed PostgreSQL database and backups | All customer records and account data | London, UK (AWS eu-west-2) |
| Resend (Plus Five Five, Inc.) | Sending email: sign-in links, invitations, reminders, visit reports, alerts | Recipient email addresses and email content (names, visit and schedule details) | Sent from Resend’s EU region (Ireland); Resend is a US company |
| Stripe Payments Europe, Ltd. / Stripe, Inc. | Subscription payments and invoices | Billing contact name, email, address and payment details (entered on Stripe’s own pages) | Ireland and United States |
| Mapbox, Inc. | Maps and address search, loaded in the user’s browser | Address search text, map coordinates of client sites, the user’s IP address | United States |
| Open-Meteo (APIs GmbH) | Weather forecasts for visits and spray records, requested by our server | Site latitude and longitude only, with no names attached | Switzerland |
| postcodes.io (Ideal Postcodes Ltd) | Turning a company’s postcode into a location during set-up, requested by our server | The company’s postcode only | United Kingdom |
| Google LLC | Optional “Continue with Google” sign-in | Name, email address and Google account identifier of users who choose it | United States |
Services we use that receive no personal data
UK bank holiday dates are fetched from gov.uk. Directions links open Google Maps in a new tab only when a user taps them; nothing is sent to Google until then.
Changes
We give customers at least 30 days’ notice by email before adding or replacing a sub-processor, and update this page. Objections and questions: privacy@groundcuvva.com.