Who processes data for Half5
These providers process data on our instructions. Data is stored in the EEA; for transfers outside the EEA we use the safeguards of the GDPR. Your personal timeline is encrypted on your device and is not in this list, because none of these providers can read it.
DigitalOcean
- Purpose
- Half5's server and database.
- Data
- All account data and entries. Your personal timeline is only stored there encrypted, without the key.
- Location
- EU (Amsterdam)
Cloudflare
- Purpose
- Secure connection to Half5, encrypted backups, storage of server secrets and receiving support email.
- Data
- Traffic between your device and Half5, encrypted backups and support emails.
- Location
- Backups in the EU; connections through the nearest data centre
Amazon Web Services
- Purpose
- File storage and sending email (Amazon SES).
- Data
- Name, email address, email content and files you upload.
- Location
- EU (Frankfurt)
Stripe
- Purpose
- Payments for your subscription.
- Data
- Your organisation's name, email address and address, subscription and payment details. You enter card and bank details directly with Stripe.
- Location
- May be outside the EEA, including the US
Sentry
- Purpose
- Error monitoring in the apps and on the server.
- Data
- Technical error details and device, operating system and app version. No names or email addresses.
- Location
- EU (Germany)
Google (Gemini API)
- Purpose
- Drafting hour descriptions when you press the AI button, description suggestions when approving and hour-review summaries.
- Data
- Customer, project, activity, duration and description. With the AI button also program names, window and page titles and git commits from that period. Summaries contain counts only.
- Location
- May be outside the EEA, including the US
OpenAI
- Purpose
- Fallback for the same AI features, when Google does not answer.
- Data
- The same data as Google.
- Location
- May be outside the EEA, including the US
Anthropic (Claude)
- Purpose
- The in-app help assistant, part of a paid subscription. Administrators can switch it off.
- Data
- Your question and the conversation, the screen you are on, your role, app version, language, subscription status, names of administrators, integrations and your own vehicles. No amounts, organisation name or your own name.
- Location
- May be outside the EEA, including the US
Google Maps Platform
- Purpose
- Looking up company names and addresses, and suggesting places near a visit or drive.
- Data
- The search term or the coordinates of that place. No name or email address.
- Location
- May be outside the EEA, including the US
Expo
- Purpose
- Push notifications to the apps, passed on to Apple and Google.
- Data
- Your device's push address and the text of the notification.
- Location
- May be outside the EEA, including the US
Before we engage a new subprocessor, we tell the administrators of customer organisations at least 30 days in advance. The full explanation is in the privacy statement.