Subprocessors and Data Location

To provide adall we use some services of other companies. This page shows which company processes which data, for what purpose and where. It is the "current list of subprocessors" the Data Processing Agreement refers to.

Every subprocessor processes data only for this service and is bound by contract. We update this page and notify workspace owners by e-mail at least 30 days before adding a new subprocessor; your right to object is in the Data Processing Agreement.

Infrastructure

CloudSpark (Türkiye) - Does: application server and database for customers in Türkiye. - Data: all of these customers' data held in the service. - Location: Türkiye (Istanbul, Ankara, Izmir data centres).

Hostinger (USA) - Does: application server and database for customers outside Türkiye. - Data: all of these customers' data held in the service. - Location: Boston, USA.

Cloudflare, Inc. - Does: encrypted backups and file storage (R2); bot protection on the sign-up form (Turnstile). - Data: encrypted database backups (the decryption key is not at Cloudflare), ad images you upload, raw platform reports; for Turnstile, the visitor's browser signals. - Location: Cloudflare's global infrastructure.

Communication and notifications

Signalbird (Pariette) - Does: e-mail delivery (password reset, reports, notifications) and system alerts. - Data: the recipient's e-mail address and the e-mail content; alerts carry technical information, not personal data. - Location: Pariette's own service.

Google Firebase (Google LLC) - Does: push notifications and crash reports in the mobile app. - Data: the device's push token, crash records (account id; no name or e-mail). - Location: USA and Google's global infrastructure.

AI

Anthropic, PBC - Does: analysis, explanations of recommendations and chat (Claude). - Data: computed summary figures and the text a feature needs (campaign names, ad texts, what you write). Your customers' personal data and access keys are not sent. Data is not used to train models. - Location: USA.

Google Gemini (Google LLC) - Does: translation of articles and texts. - Data: the text to translate. - Location: USA and Google's global infrastructure.

Payments

TAMİ (Türkiye) - Does: card payments in Türkiye. - Data: billing details, amount. Card details are entered directly at TAMİ and never reach adall. - Location: Türkiye.

Stripe, Inc. - Does: card payments and subscriptions outside Türkiye. - Data: billing details, amount. Card details are entered directly at Stripe and never reach adall. - Location: USA and Ireland.

Security and supporting services

proxycheck.io - Does: risky-IP check at sign-up (proxies, Tor). - Data: the IP address of the person signing up. - Location: United Kingdom.

Veribenim (Pariette) - Does: cookie consent and consent records on the adall.io site. - Data: the visitor's consent choice and its record. - Location: Pariette's own service.

Google Analytics (Google LLC) - Does: visit statistics for the adall.io site; runs only if the visitor gives cookie consent. - Data: page views and device information. - Location: USA and Google's global infrastructure.

Google PageSpeed Insights (Google LLC) - Does: speed and readiness pre-check of your site. - Data: only your site's public address. - Location: Google's global infrastructure.

Not subprocessors

The ad and measurement platforms (Google Ads, Meta, TikTok, LinkedIn, Search Console, your Google Analytics account, Merchant Center) are not adall's subprocessors: you have your own contract with them and adall connects to them on your instruction and on behalf of your account. Only daily exchange rates are fetched from the European Central Bank; no data is sent to it.

International transfers

Data held in the service for customers in Türkiye stays in Türkiye. Subprocessors located outside Türkiye receive only the data listed above and only as much as their task needs (for example summary figures to the AI provider, the recipient address to the e-mail service). These transfers follow Article 9 of the Turkish Personal Data Protection Law (KVKK) and the GDPR's rules on international transfers; on request, enterprise customers sign the standard contract published by the Turkish Personal Data Protection Authority electronically.

Contact: tech@adall.io