Wersja robocza do weryfikacji — treści zastępcze są w trakcie finalizacji.

Rolyio Subprocessor List

Last updated: [DATE]

TODO before publication (placeholders to resolve with legal counsel):

• [COMPANY LEGAL NAME / OPERATOR] — legal entity or sole operator name
• [DATE] — effective date
• support@rolyio.com — confirm official contact address
• Confirm AWS SES sending region and the AWS entity contracted with
• Confirm Hetzner engagement once hosting goes live (currently planned)
• Confirm Paddle engagement once billing goes live (currently planned)
• Legal review: DPAs/SCCs in place with each subprocessor; notification mechanism for list changes

---

[COMPANY LEGAL NAME / OPERATOR] (“Rolyio”) uses the following third-party subprocessors to help provide the Rolyio service. Each subprocessor processes personal data only as needed to perform its function.

1. Subprocessors

Subprocessor	Function	Data processed	Location	Status
Amazon Web Services (AWS SES)	Transactional email delivery (e.g., sharing invitations)	Recipient email addresses, names, email content	AWS region — [TODO: confirm region]	Active
Hetzner Online GmbH	Application hosting and database infrastructure	All data stored by Rolyio (see Privacy Policy)	Germany (EU)	Planned
Paddle	Payments — merchant of record for paid subscriptions	Billing contact details, payment information (handled by Paddle; Rolyio does not store card data)	Per Paddle’s infrastructure	Planned

2. Not Subprocessors: Google and Microsoft

Google (Google Workspace / Google People API) and Microsoft (Microsoft 365 / Microsoft Graph API) are not subprocessors of Rolyio. They are service providers with whom you (or your organization) have your own direct relationship and agreements. Your contacts are hosted in your Google or Microsoft account; Rolyio accesses them via their APIs under the OAuth authorization you grant, and you can revoke that authorization at any time.

3. Changes to This List

We will update this page before engaging a new subprocessor that processes customer personal data. Customers who wish to be notified of changes can contact support@rolyio.com to subscribe to updates. If you object to a new subprocessor on reasonable data protection grounds, contact us and we will work with you in good faith; if no resolution is possible, you may terminate the affected service.

4. Contact

Questions about this list: support@rolyio.com