subprocessors data sharing · Privacy Policy
Tinfoil policy finding
“ We do not sell or share your personal data for others to use independently. We share personal data only in these situations: At your request or with your direction. With our vendors and service providers acting on our behalf to operate the Services. To comply with law, legal process, or valid government requests. To protect the rights, property, or safety of Tinfoil, our users, or others. To handle emergencies or resolve disputes. In aggregated or non-identifying form. We may update this list as our practices evolve. Our current subprocessors are listed below. For business and enterprise customers, we offer a Data Processing Addendum (including Standard Contractual Clauses where applicable). If you need additional certifications or arrangements, such as a Business Associate Agreement for HIPAA or a region-specific data processing agreement, contact privacy@tinfoil.sh . Our subprocessors include: Amazon Web Services, Cloudflare, Vercel: hosting, CDN, and networking. Clerk: authentication and account management. Stripe: payment processing for web subscriptions and Containers usage. Payment details (including full card numbers) are transmitted directly to Stripe and are not stored on Tinfoil's servers. Stripe is certified as PCI DSS Level 1 compliant. See Stripe's Privacy Policy . RevenueCat: mobile subscription status and entitlements. GitHub: OAuth sign-in and repository access when you authorize our GitHub App. ”
- Document
- Privacy Policy
- Captured
- 2026-09-25
- Location
- § 6 (Who we share information with)
- Snapshot SHA-256
- 4e03bfffa2377a40f88def236c97d28337ec3eae45ab6cd24bb2e4f55a24b797
Informational only, not legal advice. Terms change; verify the source and capture date.