Subprocessors

This page lists the subprocessors Lyket relies on to provide its service — what each one does, what data it touches, and where it's located. See our privacy policy for the full picture of how we handle data.

Last updated: 8 October 2026.

International data transfers

Lyket's core infrastructure — application server, database, and cache — is hosted in the EU (Ireland, eu-west-1 region). Hashed IPs, account data, and vote/button data processed for the service do not leave the EEA.

A few subprocessors we use for billing, email, and error monitoring are based in the United States. Where personal data is transferred to them, we rely on the following legal mechanisms:

  • Stripe: covered by Stripe's active self-certification under the EU-U.S. Data Privacy Framework, the UK Extension, and the Swiss-U.S. DPF. Stripe only processes billing information of paying Lyket customers, not website visitor data.
  • Twilio SendGrid: covered by Twilio's active self-certification under the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF.
  • Rollbar: covered by Rollbar's active self-certification under the EU-U.S. Data Privacy Framework, the UK Extension, and the Swiss-U.S. DPF.
  • For any subprocessor not certified under the DPF, we rely on the Standard Contractual Clauses as incorporated in that subprocessor's own data processing agreement.

Subprocessor list

SubprocessorPurposeRoleRegistered officeProcessing locationData involvedData category
Heroku (Salesforce, Inc. / AWS)Hosting, database (Postgres)Storage / hostingUSIreland (eu-west-1)Account data, vote/button dataGeneral
Redis Cloud (Redis, Inc.)Vote and button counter storageStorageUSIreland (eu-west-1)Hashed IPs, vote countersGeneral
Amazon S3 (AWS)Redis backupsStorageUSIreland (eu-west-1)Redis backups (hashed IPs, vote counters) — deleted after 14 daysGeneral
StripePayment processingPayment processingUSUS — EU-U.S. DPFBilling data of paying customers onlyGeneral
Twilio SendGridTransactional emailEmail deliveryUSUS — EU-U.S. DPFEmail address of account holdersGeneral
RollbarError monitoringMonitoringUSUS — EU-U.S. DPFInternal numeric account ID of the Lyket account that owns the affected button — no visitor IP address or session IDGeneral

We will update this table whenever we add or remove a subprocessor. If you would like to be notified of changes, please contact us.