Sub-processors

Last updated 15 October 2026

To run SkoldTrades we use the service providers below. This page is referred to by the overseas-disclosure consent you give when you register, and we keep it current.

Providers marked Planned do not receive any of your information yet. They are listed so you can see what is intended before it happens.

Hostinger — hosting

In use
Handles:
Our application, database, documents and backups: everything you enter into SkoldTrades is stored on servers run by this provider
Where:
Germany — Frankfurt (European Union)

This is where your account, quotes, invoices and customer records are stored today. It is outside Australia, which is why your overseas-disclosure consent matters.

Hetzner Online GmbH — off-site backup data storage

In use
Handles:
Off-server copies of our nightly backups, which contain your account, quotes, invoices and customer records (uploaded photos and documents are not included)
Where:
Germany and/or Finland (European Union), transferred over an encrypted connection

A second copy of your data is kept here for recovery. It is outside Australia, which is why your overseas-disclosure consent matters.

Amazon Web Services — Simple Email Service

In use
Handles:
Outbound email (quotes, invoices, notifications you send)
Where:
Australia — Sydney (ap-southeast-2)

Email is sent from Sydney. The records the emails are built from are stored in Frankfurt (see the hosting row above).

Cloudflare, Inc. — content delivery and traffic routing (SkoldMarketer public websites)

Planned
Handles:
Routing and speeding up visits to public websites built with SkoldMarketer: the pages a visitor requests and basic technical details of the visit (such as IP address)
Where:
Global network of servers; Cloudflare, Inc. is a United States company

Not in use yet: no account or configuration exists. This row will change to in use only once it is handling real visits.

Stripe — card payments

Planned
Handles:
Card payments your customers make to you through the platform. Card numbers go to Stripe and are never stored on our servers
Where:
Australia, Ireland and the United States, with some of Stripe's own service providers in the EU, the United States and India (per Stripe's published privacy information)

Not yet in use for live payments: our payment integration is still in test mode, so no real payment information is sent to Stripe yet.

Amazon Web Services — Bedrock (language model)

Planned
Handles:
The language model that understands what a person says or types to Skold and writes the reply. It receives the words as text, not the audio
Where:
Europe — Frankfurt, Germany (eu-central-1)

Not yet used for real customer calls or chats. Everywhere in our software this service is set to Europe (Frankfurt) by default. If we move the Australian receptionist to Sydney we will change this row first.

Amazon Web Services — Transcribe (speech recognition)

Planned
Handles:
Turning a caller's live speech into text so the receptionist can understand it
Where:
Not yet in use. Where it will run is not yet fixed; we will list the region here before any real call uses it.

Not yet used for real customer calls.

Telnyx — telephony, SMS, and call records

Planned
Handles:
Carrying calls and messages, and the records about them: call recordings, transcripts, logs, billing records and backups
Where:
United States

Not yet in use. Listed separately from the row above because the two are genuinely different: the language model runs on a separate service (see the Bedrock row above), while the records about a call — recordings, transcripts, logs, billing and backups — run under Telnyx's standard data processing terms, whose primary processing is in the United States. This is the disclosure your overseas-handling consent covers.

Amazon Web Services — compute

Planned
Handles:
The server that runs the AI phone receptionist: the telephone connection, and the voice that speaks to the caller (generated on that server). Also background processing such as generating media and written content
Where:
Not yet in use. Where it will run is not yet fixed; we will list the region here before any real call uses it.

Not yet used for real customer calls. We will list what this server does and does not keep here before it is used.

Anthropic — sketch and plan reading

Planned
Handles:
Photographs of hand-drawn site sketches you upload, so they can be read and turned into a clean plan
Where:
United States

Not yet in use. When it is, only the image itself is sent — your job, customer and business details are removed before it leaves. Under Anthropic's commercial terms your images and the results are contractually excluded from being used to train their models, and Anthropic states it deletes them within 30 days, except where its safety systems flag content or the law requires longer retention (flagged content can be kept for up to two years).

What consenting to overseas disclosure means

Where a provider above is outside Australia and you have consented to disclosure to overseas recipients, Australian Privacy Principle 8.1 does not apply to that disclosure. We are not accountable under the Privacy Act for how that provider handles your information, the provider may not be subject to the Privacy Act, and you may not be able to seek redress under the Privacy Act if they mishandle it.