1. About this list

Webbebo Technologies uses the service providers below to run Onlyform. Sub-processors are providers that may process personal data contained in customer forms and responses on our behalf. Each one is bound by a written agreement that requires it to protect personal data and use it only to provide its service to us.

2. Sub-processors

ProviderServiceData processedLocation
Hetzner Online GmbHHosting for the Onlyform application, API and databaseAccount and workspace data, forms, responses, billing references and integration settingsGermany and Finland
Cloudflare, Inc.File storage (R2), content delivery, DNS, security and the onlyform.com websiteUploaded files, response attachments, website requests and network dataUnited States, with a global network
Cloudflare, Inc. (Email Service)Sending account, notification and follow-up emailsRecipient email addresses and message contentUnited States, with a global network
Anthropic, PBCAI model provider for AI features (default)Prompts, form content, conversation history and supplied files, only when you use an AI featureUnited States
OpenAI, L.L.C.AI model provider for some AI featuresPrompts, form content and supplied files, only when you use an AI feature that relies on itUnited States

3. Payment and sign-in providers

These providers process data as independent controllers for their own legal and fraud-prevention obligations, as well as on our behalf.

ProviderServiceData processed
StripeSubscription payments by card and other conventional methodsBilling details, payment method details and transaction records
CoinfatSubscription payments in cryptocurrencyInvoice amounts, account references and blockchain transaction details
GoogleOptional Sign in with GoogleName, email address and Google account identifier
AppleOptional Sign in with AppleName, email address (or relay address) and Apple account identifier

4. Services you choose to connect

When you connect an integration such as Google Sheets, Microsoft services, Slack, Notion, Mailchimp or Zapier, set up a webhook, add Google Analytics, Google Tag Manager or Meta Pixel to a form, or accept payments on a form through Stripe, PayPal, Razorpay or Coinfat, the data you select is sent to that service on your instructions. Those services are chosen by you, act under their own terms and are not our sub-processors.

5. Changes

We update this page before we add or replace a sub-processor. Customers who have a Data Processing Agreement with us can object to a new sub-processor within 30 days of the change being published, as described in the Data Processing Agreement. Questions: support@onlyform.com.