Sub-processors

_Effective 14 September 2026 (v1.8)._

A "sub-processor" is a third party that processes personal data on our behalf to help us run ReadNTag. This page lists the sub-processors we currently use. It mirrors, and is kept consistent with, Section 6 of our Privacy Policy, where the same information appears in context.

We do not sell your personal data. Each sub-processor below is engaged under a data processing agreement and only for the specific purpose described. We keep the list to a small number of established providers, and we review it when we add, remove, or change a provider.

Current sub-processors

| Sub-processor | Purpose | Location | |---|---|---| | Amazon Web Services (AWS) | Cloud hosting, database, and file storage | the United States | | Amazon Cognito (AWS) | Account sign-in and authentication | the United States | | Amazon SES (AWS) | Transactional email (verification, password reset, notifications) | the United States | | Stripe | Payment processing for paid plans | United States and EU | | PostHog | Optional product analytics, only if you consent | United States (us.posthog.com) | | Sentry | Error monitoring and crash diagnostics | United States |

PostHog runs only if you accept analytics cookies; declining does not limit your use of ReadNTag, and we also run first-party analytics on our own servers (see the Privacy Policy). Sentry receives technical error data such as stack traces and request context, which can incidentally include limited identifiers; it does not receive your uploaded documents or annotations.

Google sign-in (optional). If you choose to sign in with Google, Google acts as an independent third-party identity provider under its own privacy policy, not as a sub-processor acting on our behalf, so it is not listed in the table above. When you use it, Google shares your name, email address, and a profile identifier with us so that we can create or match your account. The sign-in itself is handled by Amazon Cognito, which is listed above. See the Privacy Policy for details.

We also disclose personal data to authorities where we are legally required to do so.

Changes

If we add or replace a sub-processor, we update this page and the Privacy Policy. Where a change materially affects how your personal data is handled, we give notice in line with our Privacy Policy and Terms. Questions: contact us via the Legal & policies page.