Current processors and subprocessors
| Provider | Service and data | Location and safeguards |
|---|---|---|
| Hostinger Hostinger DPA | VPS hosting, database, file storage, snapshots and backups; Customer Data, account data and service logs as needed to host Vehivyn. | Primary server: Manchester, United Kingdom. The precise Hostinger contracting entity will be confirmed from the account invoice during legal review. Any onward transfer must follow the Hostinger DPA and UK transfer rules. |
| Mailjet by Sinch Sinch DPA | Transactional email delivery, including recipient email, message content and delivery metadata for verification, account and service messages. | Processing locations and transfer safeguards are governed by the Sinch DPA and applicable service documentation. |
| Stripe Stripe DPA | Hosted Checkout, subscription billing, payment-method management, invoices and Customer Portal; billing contact, payment and subscription data entered or generated in Stripe. | Stripe’s contracting entities, processing locations and international-transfer safeguards are governed by its DPA and service documentation. |
| PostHog, Inc. PostHog DPA PostHog subprocessors | Consent-gated analytics and session replay for the public marketing website only; full URLs, referrers, campaign data, page text, DOM attributes, form interactions and non-password values, person profiles, session, device and interaction data. It does not process garage Customer Data through this integration. | PostHog Cloud EU service data is hosted in Frankfurt, Germany. The contracting processor is PostHog, Inc. in the United States, with transfers and onward processing governed by its DPA, applicable UK transfer safeguards and published subprocessor list. |
External data sources are not subprocessors
The Driver and Vehicle Standards Agency (DVSA) is an external government data source/integration. It does not process Customer Personal Data on Intravyn’s behalf in the role described by this list. Vehivyn is not affiliated with, sponsored by or endorsed by the DVSA. Availability and accuracy of external data should be independently checked where necessary.
Changes to this list
The Customer gives general authorisation under the DPA for providers that process Customer Personal Data. PostHog processes Intravyn-controlled public marketing-site analytics rather than Customer Personal Data under that DPA. Intravyn will publish intended additions or replacements here and provide reasonable advance notice where possible, so Customers may object on genuine data-protection grounds where the DPA applies.
Intravyn will archive the applicable provider DPAs, perform proportionate due diligence and monitor material provider changes. No additional analytics, CDN, proxy, monitoring or external support provider is currently used.
Contact us
Data Protection Lead, Intravyn Ltd, Reeth Cottage, Aysgarth, Leyburn, DL8 3AH.
Email legal@intravyn.com for legal or privacy matters, or support@intravyn.com for product support.