HelpBob is a product of Luna And The Stars LLC, a Delaware limited liability company. On this page, “HelpBob,” “we,” “us,” and “our” refer to Luna And The Stars LLC.
01How this works
You give us general authorization to engage sub-processors to deliver the Service. Each one is bound by data-protection obligations no less protective than those in our DPA, and we remain responsible for their performance.
- Advance notice. We give at least 30 days' notice before a new sub-processor begins processing your data.
- Right to object.You may object on reasonable data-protection grounds within that period. If we can't resolve your objection, you may terminate the affected part of the Service.
- Stay informed.Subscribe to change notifications (see “Get notified” below).
All personal data processed on your behalf is stored within the European Economic Area (EEA). Where a sub-processor is US-based, the transfer is covered by the Standard Contractual Clauses (and the EU-US Data Privacy Framework where that sub-processor is certified), as set out in the DPA.
02Sub-processors
These vendors may process the personal data on your connected sites and your visitors' technical data on your behalf (you are the controller; HelpBob is the processor).
| Sub-processor | Purpose | Data processed | Location of processing |
|---|---|---|---|
| Hetzner Online GmbH | Cloud hosting and storage of the application and scan results | Scan results and application data, which may include personal data contained in your page content | Germany (EEA) |
| Webdock ApS | Cloud hosting, storage, and backups | Scan results, application data, and backups | Denmark (EEA) |
| Cloudflare, Inc. | Content delivery network — serves the accessibility fixes to your visitors | Visitor IP addresses, request metadata, user-agent, and timestamps | Global edge network (US-headquartered). DPF-certified; engaged under SCCs. EEA data-localization options applied where configured. |
03Other service providers
These vendors process data for which HelpBob is the controller — your account, billing, support, and product-usage data. They are not sub-processors under the DPA and do notprocess your visitors' data. We list them here for transparency.
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Stripe, Inc. | Payment processing and billing | Billing details and transaction data (full card numbers are handled by Stripe; we never see them) | United States — SCCs |
| Postmark (ActiveCampaign) | Transactional email delivery to US recipients | Recipient email address and message content | United States — SCCs |
| Brevo (Sendinblue SAS) | Transactional and marketing email to EU recipients | Recipient email address and message content | France (EEA) |
| PostHog, Inc. | Product analytics on your use of the HelpBob dashboard | Usage and device data relating to the dashboard | EU region — hosted in Frankfurt |
04Get notified of changes
To receive advance notice when we add or replace a sub-processor:
- Subscribe using the form on this page, or
- Email [email protected] with the subject line “Subscribe: sub-processors”.
We'll email subscribers at least 30 days before a change takes effect.
05Questions
For any question about our sub-processors or data-protection practices, contact [email protected].