Legal
EvidentlySo Subprocessors
Version 1.0 · Last updated [date of launch]
These are the outside companies that process personal information for us to run EvidentlySo. None of them receive your messages or PDFs from us, because our servers never have them. All of them process data in the United States, including for customers in Canada. We'll update this page before adding a new subprocessor that handles personal information.
Subprocessors
| Company | What they do for us | Personal information they handle | Location | Status |
|---|---|---|---|---|
| Cloudflare, Inc. | Hosts evidentlyso.com, the license service and the PDF registry (Workers, D1 database, Durable Objects); sends our emails (support form, activation links, license-moved notices); spam checks (Turnstile); visit counts (Web Analytics); short-term rate limiting | License records; PDF fingerprints and Transcript IDs; email addresses in transit; internet addresses in sampled security records (about 31 days) and in one-minute rate-limit counts | United States [confirm data location settings] | Confirmed |
| Stripe, Inc. (with Link, a Stripe company, as seller of record) | Checkout, payments, sales tax, receipts, the Add-on subscription and its customer portal, refunds | Name, email, billing address, payment details, purchase history; the license key as metadata | United States | Stripe confirmed; Link as seller of record unconfirmed (dashboard setting) |
| Help Scout PBC | Our support inbox | Your email, name if given, and what you write to support | United States | Unconfirmed |
| Google LLC (Google Workspace) | Hosts our evidentlyso.com email | Email you send us and we send you | United States | Unconfirmed |
| HubSpot, Inc. | Email updates and critical-update lists | Email address, consent text, sign-up page, email opens and clicks | United States | Confirmed (forms API); open/click tracking unconfirmed |
| Plausible Insights OÜ | Website analytics (cookieless) | None. No personal data | Estonia (data hosted in the EU) | Confirmed |
Services you connect yourself
These aren't our subprocessors. You connect them and they hold your data under your own account with them.
| Company | What it does | Status |
|---|---|---|
| Dropbox, Inc. | Stores your snapshots and PDFs in your own Dropbox, in Apps › EvidentlySo. The app can read basic account details (such as the account name) [confirm account_info.read scope in the Dropbox console]. |
Confirmed |
| Your phone's maker and carrier | Hold your messages before EvidentlySo copies them | n/a |
Not used
So you know what's not there: the app uses no analytics, no crash reporting, no advertising networks, no Firebase or Google Play Services, and no AI services. The website loads no HubSpot or Google scripts and uses no Google Fonts; fonts are served from our own site.
Internal tools that hold no customer data
- GitHub (website text editor, used by our team only).
- Cloudflare Access (locks our preview site to our team).
Questions
support@evidentlyso.com · Family Docs, Inc., 3440 Youngfield St. #423, Wheat Ridge, CO 80033