Sub-processor List
Tidysite by Dropwire Digital Pty Ltd Effective: 22 June 2026 Last updated: 22 June 2026
Plain English summary. These are the third parties we use to run Tidysite. Where they hold or move your personal information, this page tells you who they are, what they do, and where their servers are. We name them publicly because we'd rather you know what's involved than have to ask.
How to read this list
- What they do for us — the function they perform.
- Personal information they touch — what categories of your information they may have access to in the course of doing that function.
- Where they hold the data — primary data location. Some of these providers may also hold data in other regions for backup or routing purposes.
If you have specific data-residency requirements (allied health, legal, government-adjacent verticals), ask about our AU hosting option at signup or via support — see Subscription Terms §4.3.
Hosting and infrastructure
| Provider | What they do for us | Personal information they touch | Where the data sits |
|---|---|---|---|
| Hetzner Online GmbH | Default VPS hosting for customer Sites and the client portal database (Pocketbase). | Customer account data, Site content, end-user form submissions if you enable a contact form. | Germany (Falkenstein / Nuremberg). |
| VentraIP / Binary Lane / DigitalOcean Sydney (opt-in) | AU-based VPS hosting for customers who request data residency at +$10/mo. | Same as above. | Australia (Sydney). |
| Cloudflare, Inc. | CDN, DNS, SSL termination, basic DDoS protection. | IP addresses, request metadata for traffic to your Site. | Globally distributed edge network, primary US. |
| Backblaze, Inc. (B2) | Encrypted offsite backups of the client portal database and customer site files. | Backup copies of all customer data we hold. | United States. |
Payments
| Provider | What they do for us | Personal information they touch | Where the data sits |
|---|---|---|---|
| Stripe Payments Australia Pty Ltd (local entity) / Stripe, Inc. (US parent) | Subscription billing, payment-method storage, tax invoicing. | Card details (handled directly by Stripe — we never see card numbers), name, email, billing address, ABN. | Stripe AU, Stripe US, Stripe global infrastructure. |
| Provider | What they do for us | Personal information they touch | Where the data sits |
|---|---|---|---|
| Amazon Web Services, Inc. (Amazon SES) | Sending all Tidysite email — receipts, system notifications, support replies, marketing. | Recipient email addresses, message content. | United States (default region). |
Scheduling
| Provider | What they do for us | Personal information they touch | Where the data sits |
|---|---|---|---|
| Cal.com, Inc. | Booking strategy calls and any other scheduled meetings. | Names, email addresses, booking times, optional meeting notes. | United States. |
| Google LLC (Google Meet / Google Workspace) | Running strategy calls via video. Where a call is recorded (all participants are notified via Google Meet's on-screen recording notice before recording starts), the recording is stored temporarily in Google Drive. | Caller names, email addresses, audio/video content of the call. | United States. |
Analytics, monitoring, and ads
| Provider | What they do for us | Personal information they touch | Where the data sits |
|---|---|---|---|
| Google LLC (Google Analytics 4) | Marketing-website analytics. | Page views, approximate location, device, referrer. | United States (data may be processed via the EU regional GA endpoint). |
| Google LLC (Google Ads conversion tracking) | Conversion measurement for Google Ads. | Marketing-site visit information for users who arrived via a Google Ad. | United States. |
| Meta Platforms, Inc. (Facebook / Instagram pixel) | Retargeting advertising on Meta platforms. | Marketing-site visit information for Meta-platform users. | United States. |
| LinkedIn Corporation (LinkedIn Insight Tag) | Retargeting advertising on LinkedIn. | Marketing-site visit information for LinkedIn users. | United States. |
| Functional Software, Inc. (Sentry) | Error monitoring for the client portal. | IP address, browser info, error context (which may include the user account ID associated with the error). | United States. |
| UptimeRobot Service Provider Ltd | Site uptime monitoring (5-minute pings). | Site URL, response status. No customer personal information. | United States / Cyprus (UptimeRobot infrastructure). |
Code repository
| Provider | What they do for us | Personal information they touch | Where the data sits |
|---|---|---|---|
| GitHub, Inc. (a Microsoft subsidiary) | Source-code storage. On Buyout (Subscription Terms §9), the repository is transferred to the customer's GitHub account. | Site source code, asset files, commit history. Personal information only if it's embedded in the code/content (it generally isn't). | United States. |
What this list doesn't cover
This list is the third parties we use to run Tidysite. It is not the third parties that may sit on your customers' end of the relationship — for example, if you embed a Calendly widget, a YouTube video, a Google Map, or a Stripe payment button on your Tidysite, those embeds bring their own third parties. We'll flag any embed that brings a notable third party into the picture during onboarding.
Notice of changes
We may add or replace sub-processors as the service evolves. Material changes will be notified to active customers by email (per Subscription Terms §17), with at least 30 days' notice before the change takes effect, unless the change is needed urgently for security reasons.
Contact
Email [email protected] with any questions about this list or our use of any provider on it.