Boardhop
Legal
Subprocessors
Placeholder. This document describes how Boardhop actually works, but its wording has not been reviewed by a lawyer and it is not yet binding. It is published so the app stores, the Marketplace listing and prospective customers have something to read during the beta. The reviewed version replaces it before public launch.
A subprocessor is a company we use that may process personal data on behalf of a customer of the Boardhop relay. This page is the authoritative list referenced by the data processing addendum.
Current subprocessors
| Provider | What it does | What it can see | Where |
|---|---|---|---|
| Hetzner Online GmbH | Hosts the relay and its database | Device registrations, notification preferences, the active-user ledger, delivery logs | Germany (EU) |
| Apple Inc. Apple Push Notification service |
Delivers notifications to iOS devices | The notification pointer: device token, organization, event type, item id, actor name, short title, link | United States |
| Google LLC Firebase Cloud Messaging |
Delivers notifications to Android devices | The same notification pointer | United States |
| Stripe, Inc. | Payments, as merchant of record; invoices and the customer portal | Billing contact name and email, billing address, tax id, payment details, subscription and invoice records | United States and Ireland |
| [EMAIL PROVIDER — to be named] | Sends trial reminders, billing notices and security notifications | Billing and administrator email addresses and the content of those messages | To be confirmed |
Customers running the self-hosted relay use only Apple, Google and Stripe from this list; Hetzner is replaced by their own hosting and no event metadata leaves their tenancy.
Who is not on this list
- Microsoft. Azure DevOps and Microsoft Entra ID are the customer's own services, under the customer's own agreement with Microsoft. We are not an intermediary for them — the app talks to Microsoft directly from the device.
- Analytics, advertising and crash reporting vendors. There are none. The store builds of the app contain no such SDK.
- Content delivery and cloud storage vendors. This website is static and serves no personal data.
Change notice
We give at least 30 days' notice before adding a subprocessor, to the billing contact of every organization on a paid plan, and update the date at the top of this page. Objections go to privacy@boardhop.dev.