Subprocessors
PairOx Pty Ltd uses the following providers to process personal data for the Zyton platform. We notify customers of material changes in line with our Data Processing Agreement.
Google Cloud
- Purpose
- Hosting: the servers, managed database and secret store that run the service
- Personal data
- All the personal data the service stores, such as accounts, consent and approval records, audit logs and server logs
- Location
- United States (us-central1, Iowa)
Cloudflare
- Purpose
- DNS, content delivery, TLS encryption and attack protection for our websites and API
- Personal data
- Every request to our websites and API passes through it: IP address, browser details, the address requested and the data sent
- Location
- Global (the Cloudflare data centre nearest the visitor); Cloudflare, Inc. is in the United States
Stripe
- Purpose
- Payments for paid plans: checkout, subscriptions and invoices
- Personal data
- Billing name, e-mail, address and tax ID, card details (entered on Stripe's own checkout page, never stored by us) and payment records
- Location
- United States
Resend
- Purpose
- Sending our e-mails: sign-in and security messages, account notices and notifications
- Personal data
- The recipient's e-mail address, the message itself, and its delivery and bounce events
- Location
- United States; our mail is sent from Amazon SES in Tokyo, Japan
Migadu
- Purpose
- Hosting our zyton.ai mailboxes (support@, privacy@, security@ and our other addresses)
- Personal data
- Messages people send us and our replies: names, e-mail addresses and content, including privacy and deletion requests
- Location
- France (EU); Migadu-Mail GmbH is in Switzerland
Sentry
- Purpose
- Error and crash reports from our services, our websites (the developer portal and Zyton Approvals on the web) and the Zyton Approvals app
- Personal data
- Technical details of errors and crashes, which can include an IP address and browser or device details. Sentry's personal-data collection is switched off, our websites cut web addresses down to the page path, and they record no session replays
- Location
- United States
Apple Push Notification service (APNs)
- Purpose
- Delivering push notifications to the Zyton Approvals app on iPhone (from the app's launch)
- Personal data
- The device's push token, a request ID and the alert type, never the details of a request
- Location
- United States
Google Firebase Cloud Messaging (FCM)
- Purpose
- Delivering push notifications to the Zyton Approvals app on Android (from the app's launch)
- Personal data
- The device's push token, an ID that Firebase creates for the app installation, a request ID and the alert type, never the details of a request
- Location
- United States / Global
Objecting to a new subprocessor
Customers can object to a new subprocessor within 30 days of being notified by emailing [email protected]. If we cannot accommodate the objection, the customer may end the affected services under the Data Processing Agreement.