Request data
Privacy

Sub-processors

The third parties that help us run the service, what they do and where they operate.

October 3, 2026Last updated
8 sectionsLength

01Overview

HUMXN uses a small number of carefully selected third-party service providers ("sub-processors") to operate the website, the registry and the marketplace. Each sub-processor is bound by a written agreement with data protection obligations appropriate to the services it provides.

Items marked "[confirm]" are being finalized and will be updated before this list is relied on. Locations describe where the provider is established or primarily processes data; some providers operate globally.

02Infrastructure and hosting

Servers, storage and backups for the website, registry and marketplace.

  • Hetzner Online GmbH. Purpose: cloud and dedicated server hosting, storage and backups. Location: Germany [confirm data center locations; EU only].

03Payments and payouts

Collection of payments from buyers and payouts to contributors and experts.

  • Stripe, Inc. and Stripe Payments Europe, Ltd. Purpose: payment processing, payouts to experts and contributors, identity and payout-account verification, and fraud prevention. Location: United States and Ireland [confirm contracting entity]. Note: Stripe also acts as an independent controller for some processing, such as fraud prevention and regulatory compliance.

04Email delivery

Delivery of transactional email, such as replies to inquiries, account notifications and receipts.

  • [Email delivery provider name] [confirm]. Purpose: transactional email delivery. Location: [Location] [confirm].

05Website analytics (optional)

Our own site measurement is cookieless and runs on our infrastructure. Google Analytics is used only where enabled, and only after consent where the law requires it.

  • Google LLC / Google Ireland Limited. Purpose: aggregate website analytics (Google Analytics), public website only. Location: United States and Ireland [confirm]. Not used in the members' dashboard or registry.

06AI services

We use AI model providers for narrowly defined tasks. Under our agreements with these providers, data sent through their business APIs is not used to train their models [confirm against current provider terms].

  • Anthropic, PBC. Purpose: AI-assisted labeling suggestions, which are marked as AI suggestions and reviewed by people, and content-safety classification of uploads. Location: United States [confirm].
  • OpenAI, L.L.C. Purpose: image generation in the website's content tools, used by our team to produce illustrations for the public site. It does not receive marketplace data or customer data. Location: United States [confirm].

07International transfers

Where a sub-processor processes personal data from the EEA, UK or Switzerland in a country without an adequacy decision, we rely on the Standard Contractual Clauses, the UK International Data Transfer Addendum, the EU-US Data Privacy Framework where the provider is certified, or another lawful mechanism. See our Data Processing Addendum for details.

08Changes and how we notify you

Before we add or replace a sub-processor that processes customer personal data, we update this page and notify customers who have signed our Data Processing Addendum at least [30] days in advance. Customers may object on reasonable data protection grounds during the notice period, as described in the DPA.

To receive notifications of changes, email privacy@humxn.io with the subject "Sub-processor updates" and the address you would like us to notify.