Subprocessors
Last updated: October 8, 2026 · version 1.3
The providers that process data on Keypoint’s behalf to deliver Lens, with their purpose, data and location.
1. About this list
To deliver Keypoint Lens we rely on the providers below (subprocessors). Each one processes only what its role requires and is bound by contractual data protection obligations. This list is referenced in the Data Processing Agreement (DPA).
2. Current list
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Contabo GmbH | Hosting of servers and databases; self-hosted mail server | All Service data (storage) and transactional e-mail | France (European Union) |
| 1984 ehf | Edge proxy | Network traffic (data in transit, encrypted), IP address | Iceland |
| Cloudflare, Inc. | CDN, DNS, DDoS protection and anti-bot verification (Turnstile) | Network traffic, IP address, anti-bot verification signals | Global / United States |
| Google LLC | Gemini (AI session-analysis summaries) and “Sign in with Google” | Excerpts of session data for analysis; login identity data (name, e-mail) | United States |
| Apple Inc. | “Sign in with Apple” | Login identity data (name, e-mail) | United States |
| Meta Platforms | Meta Ads API read access and WhatsApp Business API, only when the Customer connects them | Ad data; WhatsApp Business messages and contacts | United States / Ireland |
| Asaas Gestão Financeira S.A. | Payments in Brazil (card, PIX, boleto) | Billing and payer identification data | Brazil |
| Stripe, Inc. | International payments (cards, Apple Pay, Google Pay) | Billing and payer identification data | United States / Ireland |
3. Changes to the list
We give 30 days’ notice, by e-mail or in the app, before adding or replacing a subprocessor. During that period the Customer may object, with reasons, at [email protected], as set out in the DPA. This page is updated with every change.