Service Providers

1. About this list

We do not sell data, do not share it for advertising, and do not use third-party analytics, advertising or tracking services anywhere in the Services. Each provider below receives only what its job requires, and nothing on this list receives your content for its own purposes. Our own second server, which performs face grouping and video rendering for Bodek Files, is not a third party: it is a machine we operate under the same policy (see the Privacy Policy).

2. Providers we use for everyone

• Our hosting provider — supplies the rented servers and network the Services run on. It provides the machines; we do not give it access to accounts or content. Data: whatever resides on the servers, at rest and encrypted where this Policy says so.
• Stripe — payments, subscriptions and saved payment methods. You enter card details with Stripe; full card numbers never reach our servers. Data: your name, email, billing details and payment information.
• Mobile carriers and the telephone network — carry text messages, multimedia messages and calls for Bodek SMS. They necessarily handle the numbers and the content of a message to deliver it. Data: sender and recipient numbers, message content and media, call records.
• IP geolocation service — turns an IP address into an approximate city and country for a form response and for a support request. Data: the IP address only.
• Public code CDN — serves the Bootstrap stylesheet and icon font our pages load. Data: your IP address and browser, as part of fetching those files; no account information.
• Apple and Google push services — deliver a push notification to your device if you allow notifications. Data: the device's push token and the notification text.
• Email delivery — sign-in codes, receipts, notices and support replies are sent from our own mail server to your mail provider, which necessarily receives them. Data: your email address and the message.

3. Providers you choose

These are involved only if you connect them:

• Amazon S3 (and S3-compatible storage), Backblaze B2, Dropbox, Google Drive — store your Bodek Files content, or your Bodek Forms uploads, when you connect one as storage. Before a file leaves our server we encrypt it with keys we hold, so the provider holds an encrypted object it cannot read. Data: encrypted file content and the folder structure.
• Google (Drive and Photos APIs) — when you connect Google Drive or import from Google Photos. Data: the account and file information you authorize (see the Privacy Policy).
• Apple App Store and Google Play — distribute the mobile apps and run their own accounts and payments. We receive no store account details from them beyond what an app requires to install and update.
• Any third-party application you authorize with "Sign in with Bodek" — receives the data covered by the scopes you grant, and is then responsible for it under its own policies. You can revoke an authorization in your account settings.

4. Changes to this list

We may add, replace or remove a provider as the Services change, and we will update this page when we do. If you need advance notice of changes for your own compliance programme, write to privacy@bodek.us.