Subprocessors

1. What this list covers

A subprocessor is a company we use to run the Service that can see or store data belonging to you or to the people who use your apps. Each one works under a contract that limits it to providing its service to us.

Some parts of the platform we run ourselves, on our own software. Those are listed in section 7 and are not subprocessors, although the servers they run on may be rented from a company listed here.

2. Servers and data centres

• ·netcup: rents us servers for our Europe (eu-west) region. They run apps, databases and object storage, build your code into container images, and hold the request logs, metrics and error reports for your services. Data: everything you deploy or store in eu-west, your source code while it builds, and logs. Stored in: Germany (Nuremberg), and Austria (Vienna) for builds.
• ·Hostinger: rents us the servers for our control plane and more of our Europe region, runs one of our two DNS servers, and hosts the mailboxes behind our support and legal email addresses. Data: your account, team and billing records, the encrypted settings and secrets for your services, apps, databases and object storage in eu-west, and the emails you send us. Stored in: France (Paris) and the United Kingdom. Hostinger has not told us which country its mail service stores mailboxes in.
• ·Layer3: rents us the gateway server for our Port Harcourt (af-west) region. Connections to af-west databases and object storage from outside our network, and visits to custom root domains for af-west apps, pass through it. It also runs one of our two DNS servers. Data: that traffic, while it passes through. Nothing is stored there. Location: Nigeria (Abuja).

3. Network and storage

• ·Cloudflare: delivers our website, dashboard and API and most traffic to your apps, protects them from attacks, runs DNS for our own domains, carries traffic to apps in our Port Harcourt region, counts visits to our pages without cookies, and stores files for us. Data: requests to our pages and your apps pass through it; it stores encrypted backups of your databases, the files you upload for a static site, attachments you add on the Community Hub, copies of the container images we build from your code, and encrypted backups of our own systems. Stored in: Western Europe. Requests are handled at whichever Cloudflare location is nearest the visitor.
• ·Tailscale: the private network that links our servers to each other. Data: when two servers cannot connect directly, their traffic is relayed through Tailscale, encrypted so Tailscale cannot read it. It also knows our server names and addresses. Location: Tailscale is a Canadian company; its relays are worldwide and store nothing.

4. Email delivery

• ·Resend: sends our account, security and billing emails to you. Data: your name and email address and the content of those emails. Stored in: the United States.
• ·Mailgun: sends the emails you send through Naijamail. Data: the sender, recipients and content of each message, and delivery events such as bounces. Stored in: the United States.
• ·ZeptoMail (Zoho): a second route for Naijamail when Mailgun is unavailable or busy, and a backup for our own account emails. Data: the same as Mailgun and Resend, for the messages it sends. Stored in: India.

5. Payments and domains

• ·Bachs: our checkout partner for adding funds and buying domains. Data: your name, email address and the amount, and the card or bank details you enter on its checkout page, which never reach us. Location: Bachs is based in Nigeria and uses card processing partners that may be outside Nigeria.
• ·Openprovider: registers and renews the domains you buy through Naijacloud. Data: the domain and the contact details you give for it (name, address, email address and phone number), which it passes to the registry for that domain ending. Stored in: the Netherlands, and with the registry for each domain.

6. Sign-in and source code

• ·GitHub: lets you sign in with GitHub, and through the Naijacloud GitHub App lets us read the repositories you connect, so we can build and deploy them. Data: your GitHub username and email address, and the code in repositories you connect. Your code stays on GitHub as you chose; we read it to build. Stored in: the United States.
• ·Google: lets you sign in with Google. Data: the name and email address on your Google account. Stored in: the United States. Used only if you choose to sign in with Google.

7. What we run ourselves

These parts of the platform are our own software, run by our team. No outside company operates them or has access to the data in them.

• ·Object storage: the buckets you create are stored by our own storage system, on our servers in your bucket’s region.
• ·Builds and container registry: we build your code and keep the resulting images on our own build server and registry. A copy of each image is kept in Cloudflare storage so our Port Harcourt servers can download it quickly.
• ·Logs and monitoring: request logs, metrics and error reports are collected and stored by our own monitoring systems, including Argus.
• ·DNS for your domains: the DNS records for domains you manage with us are served by our own nameservers, running PowerDNS.
• ·The agent on every server: the software that starts, stops and checks your services is our own.
• ·Our Port Harcourt (af-west) servers are our own hardware, so no hosting company stores the apps, databases and buckets you keep in that region.

8. Changes to this list

We will update this page and email account holders at least 30 days before a new subprocessor starts handling customer data.

• ·To be sure you get these emails, turn on Product updates in Settings, Notifications.
• ·If you do not have an account, or want the notice sent to another address such as your legal or procurement team, email legal@naijacloud.com and we will add it.

If you object to a new subprocessor, email legal@naijacloud.com before it starts. You can also close your account at any time, and unused balance is refunded as our Terms of Service describe.