Legal
Subprocessors
Running mail means other companies process data on our behalf. These are all of them, what each one does, and where it is.
Last updated
01How to read this
A subprocessor is a company we use to deliver the service that may handle personal data in the course of it. The list below is complete as of the date at the top of this page.
We will publish changes here before a new subprocessor starts handling customer data, so that anyone who needs to review one has the chance.
02Not on this list
No advertising network and no data broker, because none is used. PostHog is the one analytics provider, and it covers the dashboard only; this website has no analytics. Stripe is the only subprocessor here that exists to take money rather than to run mail.
Nothing from a Private mailbox's contents is sent to any provider on this list. They receive only what the whole service already handles in the clear: the encrypted data itself, and the metadata every message carries.
03The list
| Processor | What it does | Where |
|---|---|---|
| Stripe | Payment processing and subscription billing. Card details are entered on Stripe's own checkout page and never reach our servers | EU and United States |
| Hetzner Online GmbH | Servers running the mail plane — Postfix, Dovecot and Rspamd — and mailbox storage | Finland (EU) |
| Amazon Web Services (Amazon SES) | Delivering outgoing mail, sending account emails such as sign-in links and receipts, and reporting bounces and complaints back to us | Sweden (EU) |
| Supabase | Control-plane database and authentication: accounts, domains, mailbox records | EU region |
| Cloudflare | Storage for attachments, drafts, scheduled messages and images (R2); Turnstile bot protection on sign-up and forms; and DNS where a customer authorises it | EU (storage); global edge network (Turnstile) |
| Vercel | Hosting for this website and the dashboard | Global edge network |
| OpenAI | Sorting incoming mail into inbox categories, in Smart mailboxes only: the sender, recipients, subject and the opening part of the message text. Never Private mailboxes | United States |
| Fireworks AI | An alternative provider for the same inbox categories, used instead of OpenAI when configured, on the same data and under the same Smart-only rule | United States |
| Voyage AI | Search that understands meaning: the text of messages in Smart mailboxes and the searches you type are turned into search indexes. Never Private mailboxes | United States |
| PostHog | Product analytics and error reports for the dashboard, under a pseudonymous account identifier. No email address and no mail content | United States |
| Respondo | Occasional in-product surveys: your answers, with the name and email address of the account that gave them | [to be completed] |
| Mapbox | Place suggestions for calendar event locations: the location text you type, sent from our servers without your IP address | United States |
| Upstash | Rate limiting on sign-in and sending. Identifiers are hashed before they are stored | [to be completed] |
| Inngest | Running scheduled background work: reminders, trial and account notices, search indexing and inbox categories | [to be completed] |
Sukses360 Ltd
Trading as Ruber. Registered in England and Wales, company number 16587307. Registered office 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.
Questions: hello@ruber.me