This page lists the subprocessors and infrastructure providers Vantom uses to deliver the Service, in accordance with Art. 28 GDPR. It is the canonical, always-current version; the in-app Settings → Legal table mirrors it. We update this page whenever the set of subprocessors changes.
We do not sell personal data and we do not share data with advertisers. Each subprocessor is bound by a Data Processing Agreement. Where data is transferred outside the EEA, the transfer relies on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).
Subprocessors engaged by Vantom
| Provider | Purpose | Region of processing |
|---|---|---|
| Google LLC (Firebase) | Authentication, Firestore database, Cloud Functions | Firestore eur3 (Belgium / Netherlands) · Functions europe-west1 (Belgium) · Auth US (SCCs) |
| Lemon Squeezy LLC | Payments, Merchant of Record, subscription lifecycle | United States (SCCs) |
| Resend, Inc. | Outbound transactional email (account, billing, support) | Infrastructure eu-west-1 (Ireland); corporate seat US (SCCs) |
| Vercel Inc. | Hosting of the website and update server (updates.vantom.pro) | EU edge / US origin (SCCs) |
| Upstash, Inc. | Rate-limit counter for the website waitlist signup — stores a hashed IP only, no email addresses (website only) | EU eu-west-1 (Ireland) |
| Sentry (Functional Software, Inc.) | Crash & error monitoring — only with your opt-in consent | EU / US (SCCs) |
| Discord Inc. | Community + internal crash-report webhooks (operational payloads only — no end-user PII) | United States (SCCs) |
| ipapi.co | Coarse city-level location for the optional Auto-Theme feature (IP not stored) | United States (SCCs) |
| United Domains AG | Domain registration and DNS for vantom.pro | Germany |
User-initiated integrations (independent controllers)
These run only if you actively connect your own account through an OAuth flow. For the underlying account data held by these providers, the provider — not Vantom — is the controller. You can revoke access at any time from the provider’s own settings.
| Provider | Purpose | Region of processing |
|---|---|---|
| Google LLC (Google Drive) | Cloud project sync — limited to the app-created /Vantom/ folder (drive.file scope) | United States (SCCs) |
| Dropbox Inc. | Cloud project sync and uploads | United States (SCCs) |
| SoundCloud Global Limited & Co. KG | Track upload and publishing | Germany / European Union |
Contact
For data-protection questions, see the email in the Imprint. You can lodge a complaint with your EU member-state supervisory authority; the full list is published by the European Data Protection Board.