Legal
Sub-processors
Last reviewed September 2, 2026
These are every vendor that processes personal data on our behalf when you use ReceiveVault. The list is short on purpose. Files, the database and the virus scanner all run on infrastructure we operate ourselves, so there is no third-party storage, no third-party scanning service and no third-party email platform in the chain.
| Sub-processor | What we use it for | What it can see | Where |
|---|---|---|---|
| Lunanode Hosting Inc. | Virtual private servers running the application, the Postgres database, the object storage that holds uploaded files, and the virus scanner. | Has physical access to the underlying hardware. Does not access application data in the normal course of business; files are encrypted at rest. | Toronto, Canada |
| DigitalOcean, LLC | The virtual server running our own outbound mail relay. We operate the mail server; DigitalOcean operates the machine it runs on. There is no third-party email marketing or delivery platform in the chain. | Email in transit: recipient addresses and message bodies (invite, reminder, summary, security and password-reset emails). Message bodies never contain uploaded file contents. | United StatesSubject to US jurisdiction |
| Stripe, Inc. | Subscription billing and payment processing. Card details are entered on Stripe's own checkout page and never reach our servers. | Billing name, billing email address, payment card details, and subscription history. No access to uploaded files or Contact data. | United States, with global processingSubject to US jurisdiction |
| Google LLC (Analytics, Ads) | Measurement and advertising on the public marketing pages only. Analytics and advertising tags are not loaded on the dashboard, on upload pages, or on download pages. | Marketing-page interaction data and the usual web identifiers (IP address, cookie identifiers) for visitors to those pages who accept the cookie banner. No access to accounts, uploaded files, or Contact data. | United States, with global processingSubject to US jurisdiction |
What this means for the sovereignty claim
The files your contacts upload, the database that describes them, and the backups of both are handled only by Lunanode Hosting Inc. - a Canadian company, on Canadian soil. No vendor subject to US jurisdiction holds, stores or can be compelled to produce an uploaded file.
The US-jurisdiction entries above are real and we do not hide them, but note what each one is scoped to. Our outbound mail relay is a machine we rent in the United States and run ourselves, so email bodies transit US infrastructure; message bodies never contain uploaded file contents. Stripe sees billing details and never touches a file. Google sees marketing-page visits and is not loaded on any page where files exist. Moving the mail relay to Canadian infrastructure is on our roadmap and is the last item in this table that touches message content.
Backups
- A nightly encrypted snapshot of the database and of stored files.
- Written to the same Canadian server that runs the service, then mirrored over an SSH connection to storage Viscous Bits owns and operates on a private network. No third-party backup service, and no public cloud storage bucket, holds a copy.
- Snapshots are kept for 30 days and then deleted automatically. Deleting your account removes your data from the live service immediately and from backups as those snapshots age out, and so does a file reaching the end of its retention window: received files are deleted 90 days after a request's last activity by default, up to one year if you choose a longer window, and sent files 30 days after the delivery expires.
Vendors that see no personal data
- Let's Encrypt (ISRG) - Issues the TLS certificates for our domains. Sees hostnames, never traffic or content.
Changes to this list
If we add a sub-processor we will update this page and, where the change is material, tell customers in advance so there is time to object. To be notified of changes, or to ask anything about this list, email support@receivevault.com.
See also our Privacy Policy and our security overview.