Draft: this text is still being reviewed by a lawyer.
Sub-processors
TimeInvest engages these parties for Cadence. They process personal data only for the purpose below, with the same obligations as in our data processing agreement. This is a translation of the Dutch version.
| Sub-processor | What | Data | Where |
|---|---|---|---|
| Hetzner Online GmbH | Hosting of the servers, the database and the encrypted backups | All data in Cadence | Germany (EU); backups also at a second location in the EU |
| Scaleway SAS | Sending email: invitations, sign-in links, notices and digests | The recipient’s name and email address, and the text of the message | France (EU) |
| Stripe Payments Europe, Ltd. | Payments, subscriptions and invoices | Name, email address and billing details of the billing contact; no data of teams or users | Ireland (EU); possible transfer to Stripe, Inc. (US) on the basis of the EU-US Data Privacy Framework and standard contractual clauses |
Connections you choose
An organisation can connect Cadence to services it uses itself, such as Jira, Azure DevOps, Slack, Microsoft 365 (Teams, Outlook, To Do and transcripts), Google Calendar or an AI provider. These are not sub-processors of TimeInvest: the organisation chooses those services and has its own agreement with them. Cadence sends only the data that is needed, and only suggests an AI provider that is hosted in the EU.
Signing in with Microsoft or Google happens through the organisation’s own environment. Microsoft and Google receive no data from Cadence in the process.
Changes
When we add or replace a sub-processor, we tell the administrators of customer organisations at least 30 days in advance. A customer can object, as described in the data processing agreement.
Updated on date