Subprocessors
Subprocessors of Dreamdrive, operated by Synthetic White AB. Version 1.0, effective 3 October 2026.
1. What this list is
These are the companies that process personal data on our behalf to run Dreamdrive. Each one is bound by a written data processing agreement, acts only on our instructions, and may not use the data for its own purposes. This list forms Annex III of the Data Processing Agreement and is referenced in the Privacy Policy.
2. Current subprocessors
| Company | Purpose | Location | Safeguard |
|---|---|---|---|
| Cloudflare, Inc. (USA), with its EMEA affiliates | Hosting of the API and website (Workers and Pages); database (D1); thumbnail storage (R2); key-value storage (KV); DNS, TLS and network security | Data stored in the EU (D1 with EU jurisdiction, R2 EU bucket). Cloudflare's global network terminates connections. Limited remote access from the USA for support and operations. | Cloudflare Data Processing Addendum with EU Standard Contractual Clauses; Cloudflare is certified under the EU-US Data Privacy Framework |
| Resend, Inc. (USA) | Sending sign-in codes, receipts and service emails | USA and EU | Data Processing Agreement with EU Standard Contractual Clauses |
3. Other recipients (independent controllers, not subprocessors)
These companies receive data when you use the relevant feature, but decide themselves how to process it for their own purposes, under their own privacy policies.
| Company | When | What they receive | Location |
|---|---|---|---|
| Stripe Payments Europe, Ltd. (Ireland) and Stripe, Inc. (USA) | When you subscribe or manage billing | Your card and billing details (entered directly on Stripe's pages), email, country, subscription details | Ireland and USA; Stripe makes its own transfer arrangements |
| Google Ireland Limited / Google LLC | Only if you choose "Sign in with Google" | The fact that you signed in to Dreamdrive; Google tells us your email, name and profile picture | Ireland and USA |
4. Possible future subprocessors
Dreamdrive has an optional AI prompt assistant that is currently switched off. If we enable it, prompt text you choose to send would go to one model provider among OpenAI, Google, DeepSeek, Groq or OpenRouter. We will add the provider to this list, update the Privacy Policy, and give the 30 days' notice below before the feature is enabled. The feature would be opt-in and explained in the product before first use.
5. Changes and notice
We will update this page at least 30 days before adding or replacing a subprocessor. Business customers who want an email when this page changes can ask at info@dreamdrive.ai. Under the Data Processing Agreement you may object to a new subprocessor on reasonable data protection grounds within the notice period.
6. Change log
- 3 October 2026, version 1.0: first published.