Det här dokumentet finns på engelska och spanska. Den engelska versionen gäller.
The companies that process data for Idovio Commerce, what each one does, which data it handles and where. A new one is announced here and by e-mail to account owners at least 30 days before it starts.
What it does: Hosting of the web app and the API, network security, file storage (R2), anti-abuse check on sign-in forms, routing of e-mail sent to idovio.com addresses
Data it handles: All service traffic; files a workspace stores; connection data (IP address, browser)
Where: Global network; storage in the EU
What it does: Managed PostgreSQL database of the service
Data it handles: Accounts, workspaces, memberships, subscriptions, the workspace data a merchant chooses to keep on Idovio servers, encrypted credentials, audit log
Where: Frankfurt, Germany (EU)
What it does: Delivery of service e-mail: address confirmation, password reset, invitations, security notices
Data it handles: Recipient e-mail address and the content of the message
Where: United States
What it does: Payment of subscriptions
Data it handles: Billing name and address, payment method (held by Stripe; Idovio never receives card numbers), subscription status
Where: Ireland and United States
What it does: Optional sign-in through an identity provider
Data it handles: E-mail address and the identifier of the identity, only for people who choose that way of signing in
Where: United States
