Sub-processors

Copal uses a small number of third-party providers ("sub-processors") to run the hosted service. This is the current list. We give notice of changes as described in our Privacy Policy.

Cloudflare, Inc.

• •Purpose: hosting and all storage/compute — object storage (R2), database (D1), vector index (Vectorize), serverless compute (Workers), and transactional email (Cloudflare Email Service).
• •Data processed: account data, your vault content (notes and attachments) and its derived keyword/semantic indexes, session data, and transactional (magic-link) email.
• •Location: global — Cloudflare's network, which may include data centres outside the UK/EEA under the Cloudflare DPA's Standard Contractual Clauses and UK IDTA.
• •Terms: Cloudflare Data Processing Addendum.

Stripe, Inc.

• •Purpose: payment processing and subscription management.
• •Data processed: billing identifiers, subscription status, and payment details you enter directly with Stripe (we never receive full card numbers).
• •Location: global, under Stripe's DPA and its transfer safeguards.
• •Terms: Stripe Data Processing Agreement.

Questions

support@copal.uk.