effective on
Technical Subprocessors
Lire la version française de référence
In the event of a discrepancy, the French version prevails, subject to any mandatory rules applicable to the customer. The reference version is available at
/fr/legal/subprocessors.
Version 2.3 — Updated on 17 September 2026
This page lists the providers GOLDEN F may entrust with data in order to deliver LinkyFlow. It complements the privacy policy and the DPA.
The Providers chosen and connected by the Customer, such as Binance, Coinbase, Shopify, WooCommerce, eBay or Stripe as a Provider account, do not appear in this list: they supply their own service directly to the Customer. An MCP client, an AI or an external application chosen by the Customer is likewise not a subprocessor of GOLDEN F merely because the Customer sends results to it.
List
| Provider | Service and data concerned | Main location | Transfers outside the EEA and safeguards |
|---|---|---|---|
| Amazon Web Services EMEA SARL | hosting of the application, APIs, databases, execution and backups; account, configuration, connections, usage and technical data | eu-central-1 region, Germany | main data in the EEA; any support access and subprocessors framed by the AWS DPA and the applicable mechanisms |
| Netlify, Inc. | hosting and delivery of the public website; IP address, web requests and technical data | global network, US company | adequacy decision applicable to the certified entity, or standard contractual clauses under the Netlify DPA |
| Chargebee Inc. | subscription, checkout, invoicing, tax, coupons and dunning; identity, address, VAT, plan and payment history | European data centre configured for the LinkyFlow site | any access and subprocessors outside the EEA framed by the Chargebee DPA, an applicable adequacy decision or the standard contractual clauses |
| Stripe Payments Europe, Ltd. | payment gateway behind Chargebee: processing of the means of payment, authorisation and fraud prevention; billing identity, amount, status and card details entered directly with the provider | Ireland, European Union | main data in the EEA; any transfers to Stripe, Inc. framed by the Stripe DPA and the European Commission's standard contractual clauses |
| PostHog, Inc. | product analytics and usage measurement, only after consent; counting of the public website's visits without trackers, where the IP address only serves to compute a one-day visitor code and is deleted before storage; pseudonymous identifier, events, device and pages, with no secret or Provider content | configured EU hosting | any access outside the EEA framed by the DPA and the applicable contractual clauses |
| Functional Software, Inc. d/b/a Sentry | error and performance monitoring; technical identifier, account identifier, IP address, device, page and redacted error, with no secret or Provider content | region configured in the Sentry account | Sentry DPA, applicable adequacy framework or standard contractual clauses |
| Sendinblue SAS, trading as Brevo | sending onboarding emails and managing contacts; email address, language and message content | European Union | main data in the EEA; any transfers framed by the Brevo DPA |
| Plus Five Five, Inc., trading as Resend | sending authentication and transactional emails; email address, content and delivery metadata | United States | applicable adequacy framework or standard contractual clauses under the Resend DPA |
| Google Ireland Limited | Google authentication and, only after consent, audience measurement; account identity, email, identifiers and events depending on the function | EEA and global infrastructure | mechanisms described in the applicable Google terms, including an adequacy decision or standard contractual clauses |
| Discord Netherlands B.V. | Discord authentication chosen by the user; identifier, email and authorised profile | EEA and global infrastructure | mechanisms described in the applicable Discord terms |
| tawk.to, inc. | support chat, only after consent; identifier, IP address and content you deliberately type | global infrastructure | DPA and transfer mechanisms published by tawk.to |
| Cloudflare, Inc. | delivery of the shared static assets (icons, images, manifests); IP address and technical requests | global network | Cloudflare DPA and the applicable transfer mechanisms |
Full card details are entered directly with the payment gateway and are never received or stored by GOLDEN F.
Changes
Business Customers may ask to receive subprocessor change notifications by writing to contact@linkyflow.com with the subject "LinkyFlow subprocessor notifications".
As far as possible, GOLDEN F informs subscribers fifteen days before an addition or a replacement. An urgent change necessary for security, continuity or compliance with the law may be announced sooner.
A reasoned objection relating to data protection may be addressed during the notice period to contact@linkyflow.com in accordance with the DPA.
Contact
For any question about a provider or a transfer safeguard: contact@linkyflow.com.