Linkwards uses trusted third-party providers to run the Service. This page lists them, what they do for us, and the kind of information they handle. It supports our Privacy Policy and Data Processing Terms. We update it when our providers change.
Core providers
Supabase
- What for: database, user authentication, real-time features and file storage for the Service.
- Information handled: account and login information, Page content and uploaded files, booking requests, newsletter subscribers, analytics events, support messages, notifications and consent records.
- Location: our project is hosted in the United Kingdom (London, AWS eu-west-2 region).
Vercel
- What for: hosting and delivery of our website, app, public Pages and scheduled jobs, including edge delivery, and request metadata such as the approximate country derived from an IP address.
- Information handled: web requests and technical data (such as IP address, browser and device information), and the content served.
- Location: a global network. Processing may occur in the region closest to the visitor and in the United States.
Lemon Squeezy
- What for: payment processing, subscription management, invoicing and tax collection as merchant of record.
- Information handled: name, email, billing details and payment information, subscription status and invoices.
- Note: Lemon Squeezy acts as an independent controller for the personal information it needs to take payments and meet its legal duties, under its own privacy policy.
Resend
- What for: delivery of transactional email, such as account confirmation and password messages, staff invitations, trial and milestone notices, support notifications, analytics reports, and messages sent from our contact form.
- Information handled: recipient email addresses, sender details and email content.
- Location: provider infrastructure may be in the United States or the European Union.
Cloudflare (Turnstile)
- What for: bot and abuse protection on sign-up and login.
- Information handled: technical and browser signals used to distinguish people from bots, including IP address.
- Location: a global network.
Google (Analytics and Tag Manager)
- What for: measuring how our marketing website is used, where a visitor accepts analytics on our cookie banner.
- Information handled: pseudonymous online identifiers, pages viewed, approximate location, browser and device information, and interactions.
- Location: a global network, including the United States.
Instatus
- What for: our public service status page.
- Information handled: technical request data when you visit the status page. It does not receive customer content.
Features that call other services
- QR code image generation (QR Server, api.qrserver.com): when you generate a QR code for your Page in the app, the web address to be encoded is sent to this service to produce the image.
- Video metadata (YouTube / Google): when a customer adds a YouTube link as a content card, we may request public information (such as the title and thumbnail) for that video from YouTube.
- Free tools: tools that run AI or processing models in your browser may download the model or library files from the host that publishes them. Your files stay on your device.
Services controlled by our customers
Customers on eligible plans can add Google Analytics (GA4) and Meta Pixel to their own Page. Those tools are operated by the customer’s own accounts with Google and Meta. Linkwards does not act as their processor for those tools, and they are not sub-processors of ours. Pages can also link to services chosen by the customer, such as booking, payment, review, social and messaging apps.
Changes to this list
We may add or replace providers as the Service evolves. We will update this page and, for changes affecting how customer data is processed, give notice in the app or by email where practical. If you have a reasonable objection, contact support@linkwards.com.
Our other legal documents
