Legal

Subprocessors

To run Bosferi we use a small number of third-party companies, called subprocessors, that process data on our behalf and on our instructions. This page lists them so you know who handles your data. It supplements our Privacy Policy.

Last updated: October 2026

1Current subprocessors

Some providers are only involved if you use a particular feature, as noted in the table.

ProviderWhat they doData involved
Google Cloud, Amazon Web Services (AWS)Runs our servers and databases.All data stored in Bosferi, including account details and the records you create.
CloudflareNetwork protection and delivery (content delivery, DDoS protection, bot checks) and file storage.Request details such as IP addresses, and the files you upload to Bosferi Files.
StripePayment processing for paid apps, plans and credit packs.Billing contact and address, and payment details. Card details are handled by Stripe.
HostingerSends transactional emails such as sign-up verification, password reset and notifications.The recipient's email address and the content of the email.
OpenAI, Google Gemini, AnthropicPowers Bosferi AI and receipt scanning. Only involved if you use these features.The messages, files and images you submit to these features.
SentryError monitoring for our websites and apps.Technical error reports, which can include IP address, browser and device details, and the page where the error happened.
PostHogProduct analytics on our public marketing website.Pages visited and browser and device details. Marketing website only.
Google Analytics, Google Ads, Meta PixelWebsite analytics and advertising measurement. Only used if you accept the matching cookies on our marketing website.Pages visited and ad interaction data. Marketing website only.

2How we work with subprocessors

Before we use a provider, we check it can protect the data it will handle. Then:

  • Each provider gets only the data it needs for the service it performs.
  • They process it on our instructions, to provide that service to us, and not for their own purposes.
  • When we stop using a provider, we remove it from this list.

3Where data is processed

Some of these providers process data outside your country. How we protect those transfers is explained under International transfers in our Privacy Policy.

4Services you connect yourself

Some features connect to other services at your request, for example signing in with Google, or publishing to social networks such as Facebook, Instagram, Threads and LinkedIn. Those companies receive data because you chose to connect them, under their own terms and privacy policies, so they are not listed above.

5Changes to this list

We update this page at least 14 days before a new subprocessor starts processing customer data. The date at the top shows when it last changed.

6Questions

Questions about how we handle data, or want to discuss a data processing agreement? Contact us at [email protected].