Data Processors

Last updated: March 1, 2026

Beekeeper uses a small number of carefully selected third-party service providers ("data processors") that process personal data on our behalf. This page lists all current processors, their role, location, and the legal safeguards we rely on when transferring data outside the EEA. This list is updated whenever a processor relationship changes.

For context on what data is involved in each relationship, see our full Privacy Policy. Questions? privacy@beekeeper.bz.

Stripe

Stripe, Inc. (US) / Stripe Payments Europe, Limited (Ireland)

DPA in place

Purpose

Payment processing, subscription billing, and creator payouts via Stripe Connect Express. Stripe handles all card data and creator KYC (Know Your Customer) verification.

Data processed

Merchant email and business name (for customer creation); Stripe Connect account ID and payout amounts for creators; transaction fee amounts.

Country

United States (Stripe Inc.) β€” EEA merchants are served via Stripe Payments Europe (Ireland).

Transfer safeguard

EU-US Data Privacy Framework (DPF) β€” Stripe is certified. Data Processing Agreement in place.

Google LLC β€” Email Delivery

Google Ireland Limited / Google LLC (US)

DPA in place

Purpose

SMTP relay for transactional emails: email verification, password reset, payout notifications, billing alerts, and creator invitation emails.

Data processed

Recipient email address and email content (verification links, payout amounts, error messages). No email content is stored by Beekeeper after delivery.

Country

United States (data may be processed on Google's global infrastructure)

Transfer safeguard

EU-US Data Privacy Framework (DPF) β€” Google is certified. Google Workspace Data Processing Addendum (includes Standard Contractual Clauses) in place.

Google LLC β€” Translation

Google Ireland Limited / Google LLC (US)

User-initiated only

Purpose

On-demand translation of page content into the user's selected language, via the Google Translate widget.

Data processed

Page content (text) sent to Google for translation. No personal data fields are sent. A googtrans cookie stores your language preference for 1 year.

Country

United States

Transfer safeguard

EU-US Data Privacy Framework (DPF) β€” Google is certified. Google processes this data under its own Privacy Policy. The Google Translate script is not loaded unless you actively use the language selector or have previously selected a language.

Hetzner Online GmbH

Hetzner Online GmbH β€” Industriestr. 25, 91710 Gunzenhausen, Germany

DPA in place

Purpose

Physical infrastructure hosting for all platform services: API, frontend, PostgreSQL database, and Redis session store. All platform data resides on Hetzner-managed hardware.

Data processed

All data stored on the platform (user accounts, redemption records, messages, sessions). Hetzner provides infrastructure only and does not access application-level data.

Country

Germany (EU). Data does not leave the EEA. No international transfer applicable.

Transfer safeguard

EU/EEA hosting β€” no cross-border transfer. Hetzner's standard Data Processing Agreement is in place under Art. 28 GDPR.

How we notify you of changes

If we add a new data processor or make a material change to an existing processor relationship, we will update this page and note the change in our next Transparency Report. For material processor changes that affect your data rights, we will provide 30 days' notice consistent with our Privacy Policy update commitment.

Questions: privacy@beekeeper.bz

Looking for something else?