LegalNaytto
Subprocessors
These are the companies that process personal data for Naytto, as described in the Privacy Policy and the Data Processing Addendum. We give at least 30 days' notice before adding or replacing one; to be notified, email privacy@naytto.com. Last updated: 2026-10-26.
| Subprocessor | Service used | Personal data | Location |
|---|---|---|---|
| Cloudflare, Inc. | Workers, D1 database, Durable Objects, Workers Logs (hosting, storage and logs) | Everything in the privacy policy's "What Naytto stores" table | United States (database); Cloudflare's global network (processing at the location nearest the request) |
| Cloudflare, Inc. | Realtime TURN (encrypted connection relay) | IP addresses of your browser and computer, per-session relay credential, traffic volume tagged with the account ID. Session content is encrypted and unreadable to the relay. | Cloudflare's global network |
| Cloudflare, Inc. | Turnstile (human check before an email code is sent) | IP address, browser details, page | Cloudflare's global network |
| Cloudflare, Inc. | Web Analytics (cookieless page views on naytto.com) | Page visited, referrer, browser, operating system and device type, country, page load times. No cookies or browser storage. | Cloudflare's global network |
| Plus Five Five, Inc. (Resend) | Email delivery (sign-in codes, notices and emails about plans) | Email address, message subject and content, delivery status | United States |
| Google LLC | Google Workspace (Gmail for support@, privacy@, security@ and abuse@naytto.com, which also receives Contact support messages, abuse reports and service alerts) | Name, email address and the content of messages sent to those addresses | United States |
| Google LLC | Google Analytics (naytto.com visitors who accept analytics) | Pseudonymous browser identifier, pages visited, sign-up and plan button clicks, referrer, browser and device type, approximate location. No IP addresses are stored. | United States |
| Stripe, Inc. and its affiliates | Stripe Managed Payments: payment processing, and merchant of record for paid plans | Name, email address, billing address, country and payment details | United States |
Cloudflare's terms: Data Processing Addendum and its own subprocessors.
Resend's terms: Data Processing Addendum and its own subprocessors.
Stripe's terms: Data Processing Agreement. For payments, Stripe is also an independent controller of the data it collects at checkout, under its privacy policy.