Where is data stored and processed & what third-parties do you share data with?
The below table outlines what third-party processors we rely on to process data, and the safeguards that are in place to ensure data transfer is compliant.
Company name and address |
Purpose | Applicable Safeguards and cross border transfer mechanism | Where is data transferred? |
Amazon Web Services | Data storage & processing & content delivery network | DPA Signed. Data in EU so EU/UK adequacy regulations will apply. | Ireland |
MongoDB (through AWS) | Data storage | DPA part of TOS. Data in EU so EU/UK adequacy regulations will apply. | Ireland |
Stripe | Payments | DPA Signed. EU SCCs and UK Addendum incorporated. | US |
Segment (Owned by Twilio) | Data processing | DPA Signed. Data in EU so EU/UK adequacy regulations will apply. | Ireland |
Mixpanel | Analytics | DPA part of TOS. Data in EU so EU/UK adequacy regulations will apply. | EU |
Twilio | Video calling & chat functionality | DPA part of TOS. EU SCCs and UK Addendum incorporated. | US |
Intercom | Email & customer support | DPA Signed. EU SCCs and UK Addendum incorporated. | US |
SendGrid | DPA part of TOS. EU SCCs and UK Addendum incorporated. | US | |
Sentry | Error analysis | DPA Accepted. EU SCCs and UK Addendum incorporated. | US |
Hubspot | Sending marketing emails | DPA applies to provision of services, with EU SCCs and UK Addendum incorporated. | EU |
Tremendous | Incentive payments | DPA Accepted, with EU SCCs and UK Addendum incorporated. | US |
OpenAI | AI functionality | DPA Accepted, with EU SCCs and UK Addendum incorporated. | US |
CloudFlare | Hosting and content delivery | DPA agreed. EU SCCs and UK Addendum incorporated. | US |
Slack | Customer and internal communications (optional) | DPA signed. To the extent that an international transfer is occurring then EU SCCs or BCRs incorporated. | US |
Loom | Support recordings (optional) | DPA agreed. EU SCCs and UK Addendum incorporated. | US |
We can supply further information regarding these subprocessors on request if applicable.
Updates to our subprocessors
The subprocessors used by Wondering may change over time. Wondering will update this page with notice of any new or different subprocessors as appropriate and necessary.
How do I exercise my GDPR rights as a data subject?
You can contact us directly by sending an email to [email protected].
What personal data does Wondering process on behalf of its customers?
Please see our Terms of Service for more details about what personal data we process on behalf of our customers. We are a processor of our customers’ collection and processing of personal data that they obtain through the use of our platform, which is controlled by their respective privacy policies.
What personal data does Wondering collect about its customers?
Please see our Privacy Policy for more details about what personal data we collect and process about our customers.
What are your company details?
Wondering is operated by Ribbon Technologies LTD. Our mailing address is:
Ribbon Technologies LTD,
86-90 Paul Street,
London, EC2A 4NE
United Kingdom
For more details, see our Privacy Policy.