Subprocessors
To provide the Ofero service, Advermint (CVR 43665499, VAT DK43665499; Asser Rigs Vej 8, st. tv., 5000 Odense C, Denmark) engages a small number of third-party subprocessors. This page lists the subprocessors that are active today and the data they process. Our use of subprocessors is governed by our Data Processing Agreement.
Active subprocessors
| Subprocessor | Purpose | Data processed | Location / region | Transfer mechanism |
|---|---|---|---|---|
| Hetzner Online GmbH (Germany) | Hosting and compute, PostgreSQL database, realtime and background-jobs infrastructure, and backups. | All customer and account data processed by the service, including content you upload and account records. | EEA — Helsinki, Finland. | Intra-EEA processing; no transfer mechanism needed. |
| Cloudflare, Inc. (USA) | DNS for ofero.co and R2 object storage for asset images, exported images, and database-backup storage; serves the public asset hostname assets.ofero.co. Application and realtime hostnames are not proxied through Cloudflare and resolve directly to Hetzner. | Asset and exported images, database backups, and DNS request metadata. | United States provider. Cloudflare R2 object storage; jurisdiction configured per Cloudflare’s options, EEA-first where available. | Relies on appropriate transfer mechanisms such as Standard Contractual Clauses and, where the provider is certified, the EU–US Data Privacy Framework. |
| Resend (USA) | Outbound transactional email — account verification, password reset, team invitations, and notifications — sent from send.ofero.co. | Recipient email address and the contents of transactional messages. | United States provider. | Relies on appropriate transfer mechanisms such as Standard Contractual Clauses and, where the provider is certified, the EU–US Data Privacy Framework. |
| Inbound email service provider | An email service provider handles inbound email to our published mailboxes (such as hello@, support@, privacy@, security@, and abuse@ofero.co). | The contents and metadata of emails you send to our published mailboxes. | Provider and region are being finalized and will be listed here once confirmed. | Where the provider is outside the EEA, transfers rely on appropriate mechanisms such as Standard Contractual Clauses; details will be added once confirmed. |
Not currently active
The following subprocessors are not currently active. Each is enabled only when the related feature is turned on; none of them process customer data today.
| Subprocessor | Purpose | Status |
|---|---|---|
| Stripe (USA / Ireland) | Payment processing. | Not currently active. Enabled only when billing is turned on. Billing is not active today and no payments are collected. |
| Sentry | Error and performance monitoring. | Not currently active. Enabled only when monitoring is turned on (EU region intended). |
| AI provider | AI-assisted headline and text generation. | Not currently active. Enabled only if and when AI features are turned on, with disclosure and a transfer assessment beforehand. No data is processed by an AI provider today. |
Changes to subprocessors
Ofero will update this page and notify customers of material subprocessor changes where required by our Data Processing Agreement or applicable law, so that customers have the opportunity to review them.
Contact
For questions about our subprocessors, email privacy@ofero.co.
Last updated: 29 June 2026