Who processes data for Half5
These providers process data on our behalf. Data is stored in the EEA; for transfers outside the EEA, we use GDPR safeguards. Your personal timeline is encrypted on your device and isn't listed here, since none of these providers can access it.
DigitalOcean
- For
- Half5's server and database.
- Data
- All account data and records. Your personal timeline is only stored there encrypted, without the key.
- Location
- EU (Amsterdam)
Cloudflare
- For
- Secure connection to Half5, encrypted backups, server key storage, and support email.
- Data
- Traffic between your device and Half5, encrypted backups, and support emails.
- Location
- Backups in the EU; connections through the nearest data center
Amazon Web Services
- For
- File storage and sending email (Amazon SES).
- Data
- Name, email address, the content of emails, and files you upload.
- Location
- EU (Frankfurt)
Stripe
- For
- Payments for your subscription.
- Data
- Your organization's name, email address and address, subscription and payment details. Card and bank details are entered directly with Stripe.
- Location
- May be outside the EEA, including the US
Sentry
- For
- Error monitoring in the apps and on the server.
- Data
- Technical error details plus device, operating system, and app version. No names or email addresses.
- Location
- EU (Germany)
Google (Gemini API)
- For
- Generate hour descriptions with the AI button, get suggestions when approving, and see summaries of hour checks.
- Data
- Client, project, activity, duration, and description. With the AI button, also program names, window and page titles, and git commits from that period. Summaries only show counts.
- Location
- May be outside the EEA, including the US
OpenAI
- For
- Backup for the same AI features, if Google doesn't respond.
- Data
- The same data as with Google.
- Location
- May be outside the EEA, including the US
Anthropic (Claude)
- For
- The in-app help assistant, included with a paid subscription. Admins can turn it off.
- Data
- Your question and the conversation, the screen you're on, your role, app version, language, subscription status, names of admins, integrations, and your own vehicles. No amounts, organization name, or your own name.
- Location
- May be outside the EEA, including the US
Google Maps Platform
- For
- Look up company names and addresses, and suggest nearby places for visits or trips.
- Data
- The search term or the coordinates of that place. No name or email address.
- Location
- May be outside the EEA, including the US
Expo
- For
- Push notifications to the apps, sent through Apple and Google.
- Data
- Your device's push address and the notification text.
- Location
- May be outside the EEA, including the US
Before we bring on a new subprocessor, we notify customer organization admins at least 30 days in advance. Full details are in the privacy statement.