Subprocessors
Effective date: April 28, 2026. The third-party services MemberDex uses to deliver the platform. We will give 30 days' notice before adding a new subprocessor that processes member personal data.
| Subprocessor | Purpose | Data shared | Location |
|---|---|---|---|
| Hetzner Cloud | Production server hosting (backend, admin SPA, SQLite database, photos, backups) | All member directory data, audit logs, server logs | United States (Virginia) |
| Stripe | Payment processing, billing portal, invoice hosting | Billing contact name + email; card data is collected and stored by Stripe directly | United States and EEA |
| Resend | Transactional email (invites, password resets, billing alerts) | Recipient email address, recipient name, message body, sender domain (mail.tatzel.io) | United States |
| Cloudflare | DNS for tatzel.io, edge for marketing site (memberdex.tatzel.io via Pages), TLS termination at the apex | Public site visitor IP and request metadata; no member directory data | Global edge (anycast) |
| Proton Mail | Custom-domain inbox for [email protected] | Email correspondence with support, including any details a customer chooses to include | Switzerland |
| Apple App Store | iOS app distribution and TestFlight | App Store account information, install metadata, crash reports | United States and EEA |
Notification of changes
We post additions or replacements to this list at least 30 days before the change takes effect for new subprocessors that process member personal data. Existing customers receive an email notice at the same time. If you object to a new subprocessor, you may terminate your subscription before the change takes effect with a pro-rata refund of the unused subscription period.
Standard contractual clauses
Where personal data of EU or UK residents is transferred outside their region, the receiving subprocessor is bound by the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or an equivalent transfer mechanism published by that vendor.
Contact
Questions about subprocessors or data transfers: [email protected].