Sub-processors
Last updated 20 October 2026
riwer runs on the services below. Each processes personal information only to provide its service to us, under its own security and data protection terms. Data leaves the country you are in: the transfers rely on the safeguards the law provides, such as the European Commission’s standard contractual clauses and, for Türkiye, the standard contracts of the Personal Data Protection Board.
| Service | What it does for riwer | What it holds | Where |
|---|---|---|---|
| Supabase Supabase Pte. Ltd. | Accounts and sign-in, the database (projects, documents, conversations), live updates, and some file storage | Account details and everything in your projects | United States (Amazon Web Services, Northern California); the company is in Singapore |
| Cloudflare Cloudflare, Inc. | Storing the files and pictures added to projects, and profile pictures; and checking that a request for a sign-in email comes from a person (Turnstile, from 18 October 2026) | Files and pictures; for the check, what the browser sends while it runs (IP address, browser details) | United States, and Cloudflare's global network |
| Vercel Vercel Inc. | Hosting and delivering the riwer app and its server functions | Requests passing through, and short-lived technical logs (IP address, browser, time) | United States, and Vercel's global network |
| Resend Resend, Inc. | Sending riwer's own emails: invites, storage and billing notices (from 15 October 2026) | Email addresses and names, and what each email says | United States; the emails are sent from Japan (Tokyo) |
| Mixpanel Mixpanel, Inc. | Counting what people do in riwer (from 18 October 2026): in their browser with their OK, and a few moments riwer's database records; never what anybody writes | Actions and their plain facts, browser and device type, a rough location, a random id or the account's id | European Union (EU data residency); the company is in the United States |
| Google Google LLC | Sign in with Google, and sending sign-in emails (Google Workspace) | Name, email address and profile picture; the emails riwer sends you | United States |
| Apple Apple Inc. | Sign in with Apple | Email address (or a private relay address), and your name if you share it | United States |
Paddle, when you pay
Team is sold by Paddle.com Market Limited (United Kingdom), riwer’s reseller and the merchant of record for every order. Paddle takes the payment and handles invoices, taxes and refunds as a business in its own right, under its own privacy notice. Your card details go to Paddle, never to riwer.
Changes to this list
Before a new service starts handling personal information for riwer, it is added here, with the date. Customers with a Data Processing Agreement may object to a new one, as the DPA describes. Questions about any of them: support@riwer.io.
Questions? support@riwer.io · Privacy · Terms · Refunds · Acceptable use · Security · Cookies · DPA · KVKK · Back to riwer