Subprocessors
This page lists the subprocessors Lyket relies on to provide its service — what each one does, what data it touches, and where it's located. See our privacy policy for the full picture of how we handle data.
Last updated: 16 September 2026.
International data transfers
Lyket's core infrastructure — application server, database, and cache — is hosted in the EU (Ireland, eu-west-1 region). Hashed IPs, account data, and vote/button data processed for the service do not leave the EEA.
A few subprocessors we use for billing, email, and error monitoring are based in the United States. Where personal data is transferred to them, we rely on the following legal mechanisms:
- Stripe: covered by Stripe's active self-certification under the EU-U.S. Data Privacy Framework, the UK Extension, and the Swiss-U.S. DPF. Stripe only processes billing information of paying Lyket customers, not website visitor data.
- Twilio SendGrid: covered by Twilio's active self-certification under the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF.
- Rollbar: covered by Rollbar's active self-certification under the EU-U.S. Data Privacy Framework, the UK Extension, and the Swiss-U.S. DPF.
- For any subprocessor not certified under the DPF, we rely on the Standard Contractual Clauses as incorporated in that subprocessor's own data processing agreement.
Subprocessor list
| Subprocessor | Purpose | Data involved | Location / transfer mechanism |
|---|---|---|---|
| Heroku (Salesforce, Inc. / AWS) | Hosting, database (Postgres) | Hashed IPs, account data | EU (Ireland, eu-west-1) — no international transfer |
| Redis Cloud (Redis, Inc.) | Vote and button counter storage | Hashed IPs, vote counters | EU (Ireland, eu-west-1) — no international transfer |
| Amazon S3 (Amazon Web Services) | Database backups | Full database backup snapshots (hashed IPs, account data, vote/button data) — deleted after 14 days | EU (Ireland, eu-west-1) — no international transfer |
| Stripe | Payment processing | Billing data of paying customers only | US — EU-U.S. DPF |
| Twilio SendGrid | Transactional email | Email address of account holders | US — EU-U.S. DPF |
| Rollbar | Error monitoring | Internal numeric account ID of the Lyket account that owns the affected button — no visitor IP address or session ID | US — EU-U.S. DPF |
We will update this table whenever we add or remove a subprocessor. If you would like to be notified of changes, please contact us.