Subprocessors
Piloterr uses the providers below. Customer API content is processed only in the EU/EEA, on Hetzner infrastructure in Germany (Falkenstein and Nuremberg) and Finland (Helsinki), and in our own datacenters in Toulouse. This applies to every customer and every plan. Our datacenters in Toulouse are operated by WEBAPI GROUP SAS. They are a processing location, not a third-party subprocessor. Cloudflare, Inc. provides DNS for the public websites. The proxy is enabled on those sites, and Orange-to-Orange is enabled. Cloudflare does not host customer API content. That content stays on Hetzner and in the Toulouse datacenters. Mistral AI does not receive the API request stream.
| Subprocessor | Purpose | Location | Data processed |
|---|---|---|---|
| Hetzner Online GmbH | Cloud infrastructure for the service | Germany (Falkenstein, Nuremberg) and Finland (Helsinki) | Customer API content, account data stored by the service, and security logs. |
| Cloudflare, Inc. | DNS for the public websites | DNS network | DNS queries for the public websites. The proxy and Orange-to-Orange are enabled on those sites. Customer API content is not hosted there. |
| Stripe, Inc. and Stripe Payments Europe, Ltd. | Payments | United States and EEA | Billing details and payment-card data. Card numbers stay at Stripe. Stripe may act as an independent controller for fraud and its own legal duties. No API request bodies. |
| Postmark (ActiveCampaign, LLC) | Transactional email | United States | Recipient addresses and the content of service email. No API request bodies. |
| Google LLC | Website analytics | Global | Consented website measurement. No API request bodies. |
| Discord Inc. | Support notifications and internal discussion | United States | Messages a person sends to Discord, and limited account notices. No API request stream. |
| Slack Technologies, LLC | Internal communication | United States | Messages staff put in Slack. No API request stream. |
| Linear Orbit, Inc. | Issue tracking | United States | Issue text staff put in Linear. No API request stream. |
| GitHub, Inc. | Source code | United States | Code and engineering discussion. No customer API content. |
| Mistral AI | Support tickets, the documentation assistant, and dashboard security profiles | France | Ticket text, assistant messages, and a limited security profile. Does not receive the API request stream. |
| HubSpot, Inc. | Contact forms that embed HubSpot | United States and EEA | Name, email address, and the message submitted on those forms. No API request bodies. |
Changes
We will give at least 30 days' notice before a new subprocessor processes customer API content, by updating this page and by email to the account address. You may object during that period. If we cannot offer a reasonable alternative, you may stop the affected service before the change takes effect.
Transfers
Where a provider processes personal data outside the EEA, the transfer uses that provider's data-processing terms and the European Commission's 2021 Standard Contractual Clauses. We do not rely on the EU-US Privacy Shield. Customer API content stays in the EU/EEA.
Questions about subprocessors: support@piloterr.com
Ready to get started?
Your web scraping API is one click away. Start with +500 credits, no infrastructure to set up, no proxies to manage, and no credit card required.
- +500 credits
- No credit card required
- All endpoints included