Loading...
Festivo uses the following third parties to process personal data on behalf of its customers, as described in the Data Processing Agreement. Each is bound by a written agreement with data protection obligations no less protective than the DPA. Transfers outside the EEA rely on the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework.
| Sub-processor | Purpose | Personal data | Location |
|---|---|---|---|
| DigitalOcean | Hosting of the API, databases and caches | All customer data stored in Festivo | EU (Frankfurt, Germany) |
| Vercel | Hosting of the web app and website | Request data, session cookies | USA (global edge network) |
| Stripe | Payments and subscriptions | Billing contact details, payment details | EU (Ireland), USA |
| wFirma | Invoicing and submission of invoices to KSeF | Billing name, address, tax ID, invoice contents | Poland |
| Resend | Transactional email | Name, email address, email contents | USA |
| PostHog | Product analytics | Usage events, pseudonymous identifiers | EU (Germany) |
| Datadog | Application logs and monitoring | Technical logs, which may include IP addresses and account identifiers | EU |
| Sentry | Error monitoring | Technical error data, which may include account identifiers | USA |
| Atlassian (Jira Service Management) | Customer support tickets | Name, email address, support request contents | EU, USA |
Sign-in providers you use (Google, GitHub, or your company's single sign-on) and integrations you connect (such as HiBob) are not Festivo's sub-processors: you choose them, and they process data under your agreement with them.
We update this page before a new sub-processor starts processing customer personal data and notify customers who have accepted the DPA by email. You may object within ten (10) business days of that notice, as set out in the DPA.
Questions: hello@getfestivo.com