Overview
APIDLY LTD ("Apidly") engages certain third-party service providers ("sub-processors") to assist in delivering our platform and services. Each sub-processor is bound by data processing agreements that include appropriate safeguards for personal data.
This page lists the sub-processors we currently use, the data they process, and their locations.
Current Sub-Processors
| Entity Name | Purpose | Location | Data Processed |
|---|---|---|---|
| Clerk, Inc. | Authentication and identity management | United States | Name, email, login credentials, session data |
| Neon, Inc. | Serverless PostgreSQL database hosting | United States | All account data, generated content, usage metadata |
| Vercel, Inc. | Platform hosting, edge network, serverless functions | United States (global edge) | IP addresses, request data, usage data |
| Paddle.com Market Limited | Merchant of Record — payment processing, billing, tax compliance, invoicing | United Kingdom / Ireland | Billing details, payment methods, transaction history, tax information |
| Stripe, Inc. | Payment processing (secondary) | United States | Billing details, payment methods, transaction history |
| PostHog, Inc. | Product analytics and feature flags | European Union (Frankfurt) | Anonymised usage events, session recordings (when consented) |
Safeguards
All sub-processors are contractually bound to:
- Process personal data only on our documented instructions
- Implement appropriate technical and organisational security measures
- Assist us in fulfilling data subject rights requests
- Delete or return all personal data upon termination of services
- Allow and contribute to audits and inspections
International Transfers
Where sub-processors are located outside the UK or EEA, we ensure appropriate transfer mechanisms are in place:
- Standard Contractual Clauses (SCCs) — As approved by the European Commission
- UK International Data Transfer Agreement (IDTA) — Or UK Addendum to SCCs
- Adequacy Decisions — Where applicable
Changes to Sub-Processors
We will update this page when we add or remove sub-processors. If you have subscribed to notifications, we will inform you of material changes at least 30 days before a new sub-processor begins processing personal data.
If you object to a new sub-processor, you may contact us at privacy@apidly.com within 14 days of notification to discuss your concerns.
Contact Us
For questions about our sub-processors or data processing:
- Email: privacy@apidly.com
- Post: APIDLY LTD, 82A James Carter Road, Mildenhall, Suffolk IP28 7DE, United Kingdom