Legal
Subprocessors
Draft — not legal advice.
This text is a working draft prepared with the product. It has not been reviewed by a lawyer and must be reviewed and completed by qualified counsel before Faroluma is offered to the public.
Operator details not configured. Set the LEGAL_* environment variables before launch.
Service providers that may process data for Faroluma. The location and transfer mechanism for each must be confirmed against the provider's current data processing agreement before launch.
| Provider | Purpose | Data involved |
|---|---|---|
| Hetzner Online GmbH | Hosting: application servers and database (Germany) | All service data |
| Cloudflare | CDN, DNS, firewall, bot protection (Turnstile), object storage (R2) for reports and backups | Traffic metadata; encrypted backups; report files |
| Stripe | Payments, subscriptions and invoices | Billing contact, invoices; card data stays with Stripe |
| Transactional email provider (to be selected) | Account, report and alert emails | Email address, message content |
| Sentry (or self-hosted GlitchTip) | Error monitoring with personal data scrubbed | Technical error data |
| DataForSEO | Search and Maps results, business listing data, search volume estimates | Business name, city, search phrases |
| Serper | Fallback search results | Search phrases |
| PageSpeed Insights and Chrome UX Report (speed); Places API (identifying the business) | Public website URLs; business name and city | |
| OpenAI | Sampling AI assistant answers via the official API | Questions naming a type of business and a city |
| Anthropic | Sampling AI assistant answers; plain-language rewording of findings | Questions naming a type of business and a city; finding texts and measured numbers |
| Perplexity | Sampling AI assistant answers via the official API | Questions naming a type of business and a city |
Version 2026-10 (draft)