Subprocessors and where data is kept

The platform: your projects and your users' data

Here we are your processor, acting on your instructions.

Data	Where it lives	Leaves Zambia?
Your databases: tables, sign-in users, sessions	Each project's own PostgreSQL container on our server in Lusaka	No
Your uploaded files	Our server in Lusaka	No
Platform records: accounts, projects, billing ledger, project credentials	Our platform database in Lusaka	No
Off-site backup copy (paid plans)	Cloudflare R2 (Cloudflare, Inc., USA; location chosen by Cloudflare). Encrypted with AES-256 in Lusaka before upload; the key stays in Zambia	Yes, encrypted outside Zambia
Requests on their way in	Cloudflare's network and DNS. The secure connection is set up at the site nearest the user; for Airtel users in Zambia that is Johannesburg	Passes through outside Zambia
Sign-in emails your projects send (confirmations, password resets)	Resend (USA)	Yes outside Zambia

Plan fees

Here we are the controller.

Data	Service
Payer phone number, amount and reference	Lenco (mobile money collection)

This website and its sign-up form

Here we are the controller.

Data	Service	Where
Website hosting and form handling	Vercel	USA outside Zambia
Emails to people who sign up, and to our team	Resend	USA outside Zambia
Newsletters and updates to people who sign up	Zoho Campaigns	USA outside Zambia
Company email, including replies to people who sign up	Zoho Mail	USA outside Zambia
Website analytics, if you accept the cookie banner	Amplitude	EU outside Zambia
Website page views, if you accept the cookie banner	Google Analytics	Global outside Zambia
Conversations with people who sign up	WhatsApp (Meta)	Global outside Zambia
Company email and documents, including notes from calls	Google Workspace	Global outside Zambia

Keeping this current

We add a service to this page before it goes live, and review the list at least every quarter. Our intention is to move the off-site backup copy and the website's sign-up storage into Zambia; this page will change when they do.