Legal
Sub-processors
Effective 2026-09-09
Vessel Hunter uses a small number of third parties to run the platform. This page names them, says what each one does, and says where it is. It is the current list referred to in our data processing agreement and our privacy policy.
Processing data you put into the platform
For personal data you upload as a customer, you are the controller and we act as your processor. The parties below are our sub-processors for that data.
| Sub-processor | What they do | Where |
|---|---|---|
| Hetzner Online GmbH | Hosting, database and backups. The platform itself runs here. | Germany (EEA) |
| Stripe Payments Europe | Billing, subscriptions and payment records. | Ireland, with processing in the United States |
| Resend | Delivery of account, notification and support email. | United States |
| Google LLC (Gemini API) | The AI behind features that read or draft text: support replies, drafted messages, and reading a document you send us. | United States |
| Anthropic PBC | The second AI provider, behind the same features as the one above. | United States |
| Apollo.io | Business contact enrichment, when you look a contact up. | United States |
Used to run our own business
These handle our own correspondence and internal work rather than data you upload. They are listed because they still process personal data, and because a register that only shows the convenient half is not a register.
| Provider | What they do | Where |
|---|---|---|
| Google Workspace (Gmail) | Our own mailbox. It carries our correspondence with you, and the thread history so we can see what was said. | Ireland and the United States |
| Telegram FZ-LLC | An internal intake channel our own staff use, for example to photograph a business card or forward an invoice. Nothing you upload to the platform passes through it. | United Arab Emirates |
| Google Analytics 4 | Website analytics. Only runs if you accept analytics cookies. | Ireland and the United States |
| Plausible Insights OÜ | Cookieless website statistics, aggregated and with no personal identifiers. | Estonia and Germany (EEA) |
Where vessel data comes from
Vessel positions, identifiers and voyage records are supplied by maritime data providers, principally Datalastic. These receive vessel identifiers only. No customer personal data is sent to them, so they are not sub-processors of personal data.
Transfers outside the EEA
The platform, its database and its backups are in Germany, inside the EEA. Several of the providers above operate outside it, mostly in the United States. For those transfers we rely on the EU Standard Contractual Clauses together with supplementary measures such as encryption in transit, and where a US provider is certified under the EU-US Data Privacy Framework we may rely on that framework instead. You can ask us for a copy of the relevant safeguards.
Changes to this list
We update this page when a provider is added or removed. Customers under a data processing agreement can ask to be notified of changes in advance, and can object to a new sub-processor on reasonable data protection grounds, as set out in that agreement.
Questions
Write to privacy@vesselhunter.io.
Questions? Get in touch.