Subprocessors
Last updated: August 2026
This page lists service providers that may process personal data for Clarvelo. It is intended to support business customers that need transparency under GDPR and data processing agreements.
| Subprocessor | Purpose | Data categories | Location | Transfer mechanism |
|---|---|---|---|---|
| Hetzner Cloud | Application hosting, database, and networking | account data, workspace data, workshop content, logs | Germany (EU) | EEA processing; no transfer mechanism needed |
| Resend (Plus Five Five, Inc.) | Transactional emails, invitations, account notifications, and marketing broadcasts | names, email addresses, message metadata, email content, subscription preferences | United States | EU-US Data Privacy Framework / Standard Contractual Clauses |
| Polar.sh (Polar Software, Inc.) | Merchant of record, checkout, subscriptions, billing, and tax receipts | billing contact details, subscription data, transaction identifiers, tax data | United States | EU-US Data Privacy Framework / Standard Contractual Clauses |
| Requesty EU | AI routing | prompts, workshop content, and participant contributions submitted to AI | European Union | EEA processing; no transfer mechanism needed |
| Amazon Web Services (AWS Bedrock) | AI session insights | prompts, workshop content, and generated outputs | Frankfurt, Germany (eu-central-1) | EEA processing; no transfer mechanism needed |
| Mistral AI | AI-generated workshop content, summaries, and suggestions | prompts, workshop content, and participant contributions submitted to AI | France (EU) | EEA processing; no transfer mechanism needed |
| OAuth authentication and Google Drive file picker | account identifiers, authentication data, and files selected by the user | United States | EU-US Data Privacy Framework / Standard Contractual Clauses | |
| Stripe | Alternative payment processing | billing contact details, subscription data, transaction identifiers, and tax data | United States | EU-US Data Privacy Framework / Standard Contractual Clauses |
Merchant-of-record note
Where Polar.sh acts as merchant of record, it may also process certain checkout, payment, tax, and compliance data as an independent controller. Customer-facing checkout terms and privacy information should be linked from the checkout flow.
New subprocessors
For business customers with a data processing agreement, notice periods and objection rights for new subprocessors should be defined in that agreement.
Data processing agreement
A GDPR data processing agreement is available on request for customers where Clarvelo UG (haftungsbeschränkt) processes personal data on their behalf.
Clarvelo is an AI workshop facilitator for collaborative teams.