Legal documents
Subprocessors
The companies that process personal data for Crunu, what each one does, where the data is handled, and the official pages we checked them against.
- Effective
- Version
- 1.0
- Last updated
On this page
KeepFlow L.L.C-FZ relies on the companies below to run Crunu. Each one processes personal data on our behalf under its own data processing terms. None of them can read the values you store: Cloudflare keeps them only as ciphertext, and Resend and Vercel never receive them.
The list was last checked on 2026-10-27 against each company's official pages, listed under Sources at the end of this page.
Current subprocessors
| Company | Used for | Personal data involved | Where |
|---|---|---|---|
| Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, United States | Runs the service at app.crunu.com on Cloudflare Workers, stores its database in Cloudflare D1, serves downloads of the crunu agent from Cloudflare R2 and provides DNS for Crunu domains | Everything the service stores, as listed in the Privacy Policy: ciphertext of your values, account and team metadata, audit log and delivery records. Also IP addresses and request details, kept in request logs for up to 7 days | Global network: each request is handled in the data center closest to the user. Database primary location: Western Europe, without read copies elsewhere |
| Plus Five Five, Inc. (Resend), 2261 Market Street #5039, San Francisco, CA 94114, United States | Sends email from mail.crunu.com: sign-up codes, invitation address checks and alert emails | Recipient addresses, message content and delivery logs, kept for 30 days | Sent from Resend's EU region (Ireland); stored in the United States |
| Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, United States | Hosts the crunu.com website and provides Vercel Web Analytics and Vercel Speed Insights | IP addresses and request details needed to deliver pages. Analytics data is aggregated, cookie-free and not tied to IP addresses | Global network; processing in the United States and other countries where Vercel operates |
Each of these companies uses its own subprocessors and publishes them on the pages linked below.
Services that aren't subprocessors
Crunu has no advertising partners, no data brokers and no third-party trackers on crunu.com or app.crunu.com. Webhooks and email recipients that your organization configures for alerts are chosen by you, not by us, so they aren't our subprocessors.
Changes
Before a new subprocessor starts processing personal data, we add it to this page and update the date above. Organization owners who want an email about each change, or who want to object to one, can write to support@crunu.com.
Sources
All pages were checked on 2026-10-27.
Cloudflare
- Sub-processors for Cloudflare services, last updated by Cloudflare on October 1, 2025
- Customer data processing addendum
- Privacy policy, effective November 4, 2025: company address and transfer mechanisms
- D1 data location: location hints and jurisdictions
- D1 Time Travel: 30 days of restore history on Workers Paid
- Workers Logs: 7 days of log retention on paid plans
Resend
- Subprocessors, last updated by Resend on 2026-08-27
- Data processing addendum: legal entity Plus Five Five, Inc. and its address
- GDPR overview: storage in the United States, sending regions, 30-day log retention, transfer mechanisms
- Sending regions: eu-west-1 is Ireland, and account data is stored in the United States whatever the sending region
Vercel
- Privacy notice, effective June 1, 2026: company address and transfer mechanisms
- Trust center and subprocessors
- Web Analytics privacy and compliance: no cookies, daily visitor hash, data points collected
- Speed Insights privacy and compliance: data points collected