Privacy
Subprocessors
Your own cloud provider (DigitalOcean, Hetzner, Vultr, OVHcloud, AWS or your own hardware) is your supplier, not ours: you hold that contract and we never see its data.
| Company | Where | What for |
|---|---|---|
| Amazon Web Services (EC2, RDS, S3) | United States (us-east-1) | Hosts the control plane, its database and encrypted backups |
| Amazon SES | United States | Sends invitations, verification links, alerts and notifications |
| Amazon Route 53 | Global | DNS for *.apps.railyard.run app addresses |
| Cloudflare | Global | DNS for app addresses when a team chooses it; planned proxy in front of the dashboard |
| GitHub | United States | Repository access through the Railyard GitHub App, when a team connects it |
| Stripe | United States | Billing, once plans launch; we keep a customer reference, never card numbers |
Changes to this list are announced by email to team owners 30 days before they take effect. Questions: privacy@railyard.run.