Legal
Sub-processors
The third-party services that process personal data for Degroshi, what they receive and where they are.
In short
- These are the companies that process personal data on our behalf, grouped by what they do, with the purpose, the data they receive and where they are.
- Core hosting is in the EU (Railway, Amsterdam), and so is error monitoring (Sentry, Frankfurt). AI providers, email, service monitoring (Grafana Labs), our status page and in-app purchase records (RevenueCat) are in the United States.
- Payment providers (monobank for web card payments of Ukrainian residents, Paddle as reseller for web purchases elsewhere, Apple for App Store purchases) process your payment as independent services under their own terms; they are listed here so you can see where payment data goes.
- Services you connect yourself (Monobank, your exchange, your wallet provider, an external AI client) are not sub-processors: they are independent services that you authorise us to read from or to share with.
- We update this page before adding a sub-processor; changes are announced here with 3 days' notice.
1. Infrastructure and storage
| Provider | Purpose | Data | Location | Policy |
|---|---|---|---|---|
| Railway Corporation (San Francisco, US) | Hosting of the API, the web app, the PostgreSQL database and Redis (cache, queues, realtime); the HTTPS edge of degroshi.com and api.degroshi.com; database backups; separately, our status page (status.degroshi.com) and its email subscriptions | All data stored by the Service; request metadata (IP address, headers); for the status page, the email addresses of people who subscribe to its updates | EU (Amsterdam region); the status page in the United States (Virginia) | railway.com/legal/privacy · DPA with EU SCCs / DPF |
| Cloudflare, Inc. (San Francisco, US) | DNS for degroshi.com and api.degroshi.com; R2 private bucket for uploaded files (avatars, space icons, receipts and attachments); cdnjs, which serves the web app's icon font; Workers, which pass our monitoring alerts (from Sentry, Grafana Labs and the status page) on to us by email | DNS queries; uploaded files; for cdnjs, your IP address and browser details; for alerts, technical data with random identifiers | Global network; R2 bucket placed automatically by Cloudflare | cloudflare.com/privacypolicy · EU-US DPF + SCCs |
2. AI providers (United States)
| Provider | Purpose | Data | Location | Policy |
|---|---|---|---|---|
| Anthropic, PBC | Claude models: the Suricate assistant (including its scope checks and the Suricate plan), text and receipt drafts, categorisation fallback, import mapping, recurring detection | Your messages, relevant records, receipt images, transaction text | United States | anthropic.com/legal/commercial-terms · DPA with EU SCCs; no training on customer content; 30-day deletion |
| Voyage AI Innovations, Inc. | Text embeddings for merchant memory and category matching | Short transaction and merchant texts | United States | voyageai.com/privacy · DPA; training opt-out used (content deleted after processing) |
| AssemblyAI, Inc. | Speech-to-text for voice drafts and voice messages to the assistant | Voice clips; transcripts (deleted by us once read) | United States | assemblyai.com/legal/privacy-policy · EU-US DPF; DPA; training opt-out used |
| TypeSafe AI, Inc. | Optional alternative categoriser ("Jev"), off by default | Transaction text | United States | typesafe.ai/legal/privacy-policy · no training on inputs |
3. Email, sign-in and notifications
| Provider | Purpose | Data | Location | Policy |
|---|---|---|---|---|
| Plus Five Five, Inc. (Resend, San Francisco, US) | Sending service emails: email verification and one-time codes, password reset, email change, space invitations, budget alerts, weekly summaries; status page updates (incidents and planned maintenance) to people who subscribed to them; alerts about the Service's health to us | Email address, name, the email content | United States | resend.com/legal/privacy-policy · DPA with EU SCCs; EU-US DPF |
| Google LLC | "Sign in with Google" on the web and in the apps (only if you use it) | Google account id, name, email, ID token | United States / global | policies.google.com/privacy |
| Apple Inc. | "Sign in with Apple" (only if you use it); App Store distribution of the apps; Apple Push Notification service for push notifications you allow | Apple user id, name and email (or Apple's relay address); the device's push token and the notification text (amounts are left out unless you allow them) | United States / global | apple.com/legal/privacy |
4. Payments and subscriptions
| Provider | Purpose | Data | Location | Policy |
|---|---|---|---|---|
| JSC "Universal Bank" (monobank, Kyiv, Ukraine) | Internet acquiring for plans bought on the web by people who live in Ukraine: the payment page (card, Apple Pay, Google Pay), saving your card as a token for renewals, renewal charges, refunds, payment receipts and fiscal receipts | Amount, currency, plan description and our payment reference; your email address (for the receipt); the card details you enter on monobank's page (Degroshi receives only the masked number, the card network and a token) | Ukraine | monobank.ua/privacy · bank licensed by the National Bank of Ukraine; independent controller for the payment |
| Paddle.com Market Limited (London, UK) and its affiliates | Reseller and Merchant of Record for plans bought on the web outside Ukraine: checkout, sales tax, renewals, refunds, receipts and invoices, the customer portal | Your email address and our identifiers of your account, checkout and price; the name, address, payment and tax details you give Paddle at checkout (Degroshi receives the transaction status, amounts, currency, tax, billing country and the card's last four digits); when its checkout opens on our page, your IP address and browser details | United Kingdom / global | paddle.com/legal/privacy · independent controller for the purchase |
| RevenueCat, Inc. (Brandon, FL, US) | Records App Store purchases and tells our API which plan your account has | Your Degroshi account identifier (a random id); store, product, price, currency, country of the store account, purchase dates and status | United States (AWS) | revenuecat.com/privacy · DPA with EU SCCs |
| Apple Inc. | Sells plans in the iPhone app through the App Store (charging, renewals, cancellations, refunds, receipts) | Your Apple account and payment details, held by Apple; your Degroshi account identifier attached to the purchase | United States / global | apple.com/legal/privacy · independent controller for the purchase |
5. Monitoring
| Provider | Purpose | Data | Location | Policy |
|---|---|---|---|---|
| Functional Software, Inc. (Sentry, San Francisco, US) | Error monitoring for the API and the web app; crash and error reports from the iPhone and Mac apps; timings of requests | API: request context (path, status, user id, user agent); credential headers and cookies are removed before sending. Web app: errors and timings from your browser, passed on by our own server, so Sentry receives neither your IP address nor cookies; page addresses without query strings; no account identifier. Apps: crash and error reports, the steps before them and timings, with a random installation identifier (not your account), the device model, its language and time zone, and the system and app versions; on by default, and you can turn them off in Settings. Sentry is set not to store IP addresses | EU (Frankfurt data region) | sentry.io/privacy · DPA; EU-US DPF + SCCs for any access from the US |
| Raintank Inc. dba Grafana Labs (New York, US) | Monitoring of the Service: metrics, logs and traces, alerts, and uptime checks of our sites from Grafana's probe locations (Frankfurt, London) with a test account | Technical metrics, logs and traces carrying only random identifiers (such as request, trace and user ids); no financial data, names, email or IP addresses | United States (AWS us-east-2) | grafana.com/legal/privacy-policy · EU-US DPF |
| ClickHouse, Inc. (Langfuse, Redwood City, US) | AI observability, when enabled: timing, model, tokens and cost of AI calls (prompt and answer content not captured by default) | AI call metadata; user and space ids | EU (Ireland) or US (Oregon) region of Langfuse Cloud, as configured | langfuse.com/privacy · DPA |
6. Reference data and enrichment
| Provider | Purpose | Data | Location | Policy |
|---|---|---|---|---|
| Open Exchange Rates (UK) Limited (London, UK) | Currency exchange rates | None (the Service fetches rates; no user data is sent) | United Kingdom | openexchangerates.org/privacy |
| Massive.com, Inc. (Polygon.io, US) | Market and currency rates | None (no user data is sent) | United States | massive.com/privacy |
| Brandfetch Sàrl (Switzerland) | Merchant logos and brand colours; merchant-name suggestions in the merchant field (web and apps) | Merchant names or domains derived from your transactions, or the name you type; logos and suggestions are loaded directly by your browser or app, so Brandfetch also sees your IP address and browser or device details (no account identifiers, no amounts) | Switzerland (Swiss data protection law) | brandfetch.com/privacy |
7. Connection providers (used only for the connections you set up)
These providers receive data only when you connect the corresponding service. The Connected Services Notice explains each connection.
| Provider | Purpose | Data | Location | Policy |
|---|---|---|---|---|
| Monobank (JSC "Universal Bank", Ukraine) | Reading the cards, jars and private-entrepreneur accounts you choose to connect, their balances and statements; Degroshi is a registered Monobank provider and you confirm the access request in the Monobank app | The access request and the reads made under it, signed with Degroshi's provider key; notifications of new transactions that Monobank sends to our API | Ukraine | monobank.ua/privacy |
| Zerion Inc. (San Francisco, US) | Wallet holdings, valuations and on-chain history for crypto wallets you add | Wallet addresses (public on-chain data) | United States (hosted in part in the US, AWS) | zerion.io/privacy-policy |
| Alchemy Insights, Inc. (Delaware, US) | Ethereum JSON-RPC: resolving ENS names and verifying smart-contract wallet signatures (EIP-1271) | ENS names, wallet addresses, signature hashes | United States | legal.alchemy.com · DPA with EU SCCs |
| reown inc. (WalletConnect) | Connecting your wallet app to sign the ownership message (runs in your browser or on your phone) | Wallet address, the message you sign | Europe and other locations where it has facilities; SCCs for transfers | reown.com/privacy-policy |
| The exchanges supported through CCXT (for example Binance, OKX, WhiteBIT) | Reading balances and activity of the exchange account you connect with a read-only key | Your API key (sent only to that exchange) | The exchange's own location | The exchange's own policy |
8. Planned (not in use yet)
These providers will only be used once the business features launch; this page will be updated before they receive any personal data.
| Provider | Purpose | Data | Location |
|---|---|---|---|
| National Bank of Ukraine | Official exchange rates for business spaces | None (the Service fetches rates; no user data is sent) | Ukraine |
| Monobank business API (JSC "Universal Bank") | Reading company accounts and statements with a token you paste from the monobank business cabinet | The token (sent only to monobank) and the reads made with it | Ukraine |
9. Changes
We update this page before a new sub-processor receives personal data; the change is announced here with 3 days' notice. Questions: support@degroshi.com. This page is published in Ukrainian and English; if the two differ, the Ukrainian text prevails.
Change history:
- 26 October 2026 (version 1.4): our status page (status.degroshi.com), hosted by Railway in the United States, and its email subscriptions are added, with Resend sending the updates; Sentry now also receives error reports from the web app (passed on by our own server, without your IP address or cookies) and, unless you turn them off, crash reports from the iPhone and Mac apps with a random installation identifier; Grafana Labs also checks from its probe locations that our sites are up; Cloudflare Workers pass our monitoring alerts on to us, and Resend emails them.
- 25 October 2026 (version 1.3): Paddle (Paddle.com Market Limited, UK) is added under Payments as our reseller and Merchant of Record for plans bought on the web outside Ukraine; monobank now takes web payments only from people who live in Ukraine. The name is spelled Degroshi.
- 25 October 2026 (version 1.2): first published version. Compared with the draft of 24 October, Railway is named as the HTTPS edge of our domains, Cloudflare's role is limited to DNS, file storage and the cdnjs icon font, Brandfetch requests from your browser or app are described, external AI clients are listed among the services you connect yourself, Grafana Labs is added for monitoring, and Sentry moves to its EU (Frankfurt) data region.