The short version
- Each provider gets only the data its job needs.
- None of them may use it for their own purposes.
- A new provider is listed here at least 14 days before it starts.
A summary to read first. The sections below are what counts.
1The list
| Provider | What it does for tinbo | Data it handles | Where |
|---|---|---|---|
| Railway | Hosting: the servers that run the dashboard and the redirects, and the main database. | Everything in the service: accounts, workspaces, links and click records. | United States |
| Upstash | Cache that lets a redirect answer without asking the database. | Link settings: short link, destinations and routing rules. No visitor data. | — |
| Tinybird | Analytics store for click records. | Click records, including IP address, user agent, referrer and approximate location. | United States |
| domainee | Custom domains: certificates and the edge that forwards a request on your domain to tinbo. | Requests to short links on custom domains, including the visitor’s IP address. | Edge network, nearest location to the visitor |
| country.is | Looks up the approximate location of a visitor for geo targeting and analytics. | The visitor’s IP address. | — |
| GeoJS | Backup for the location lookup when the first provider is unavailable. | The visitor’s IP address. | — |
| Resend | Sends email: invitations, account and usage notices, and contact-form messages to us. | Email address and the content of the message. | United States |
| Better Stack | Error reports and monitoring, so that failures get noticed and fixed. | Technical details of an error. May include an IP address or a link’s address. | European Union |
| urlscan.io | Abuse scanning: checks where a new link leads. | Destination URLs. No account or visitor data. | Germany |
| TypeSafe AI | Abuse scanning: automated judgment of a destination and its page. | Destination URLs and the text of the pages they lead to. No account or visitor data. | — |
2Payments
Creem (Armitage Labs OÜ, Estonia) is not on the list because it does not work on our behalf: it sells the subscriptions in its own name, as merchant of record, and is itself responsible for what you enter at checkout, such as your email address and payment details.
3Changes to the list
Before a new provider starts handling customer personal data, it is added to this page at least 14 days ahead. To be told by email when that happens, write to support@tinbo.co. How to object to a new provider is described in the Data Processing Agreement.