Sub-processors
Last updated
Magma Company GmbH ("Dawn", "we", "us") uses the third parties listed below to operate the Service. Each is bound by a data processing agreement, each receives only what its one job needs, and none of them may use what they receive for their own purposes.
This is a page of its own rather than a paragraph in the Privacy Policy so that it can change without that document changing, which is what makes the notice commitment in section 4 possible to keep.
1. Always
These are involved in every account, because there is no version of the Service without them.
| Sub-processor | What it does | Processes | Location | Transfer basis |
|---|---|---|---|---|
| DigitalOcean, LLC | Runs the application and its Postgres database, and holds the backups | Everything in your account | Frankfurt, Germany (EU) | Hosting within the EU, no transfer |
| Clerk, Inc. | Signs you in, holds your password and manages your session, and records whether your account has a subscription | Email address, name, profile picture, authentication events, IP address, and the status of your subscription | United States | EU Standard Contractual Clauses |
| Resend | Sends the mail Dawn sends: invitations, share notifications, RSVP replies, account notices | Recipient address, sender address, message content | United States | EU Standard Contractual Clauses |
| PostHog, Inc. | Counts how the Service is used | Usage events, browser and device type, approximate location from IP address. Never the content of your account. | European Union | EU Cloud, no transfer |
| Vercel Inc. | Serves these documents at legal.dawn.am | IP address and user agent, in ordinary request logs. Nothing from any account. This site is static files, has no database and sets no cookies. | Global CDN, company in the United States | EU Standard Contractual Clauses |
PostHog is only involved where you have consented to analytics. See the Cookie Policy.
Vercel is listed because it sees the request when you read this page. It is deliberately a different provider from the one the application runs on: these documents exist to be readable when the application is not, which they would not be if one incident could take out both.
2. Only if you use the feature
| Sub-processor | What it does | Processes | Location | Transfer basis |
|---|---|---|---|---|
| Anthropic, PBC | Answers the assistant, and reads email you forward to your private inbound address | Your instruction and whatever your account the tools it calls read; the text and attachments of a message you forwarded | United States | EU Standard Contractual Clauses |
| Stripe, Inc. | Takes the payment for a subscription | Your card details, billing name and address, the amount and the date. Nothing from your account. | United States, with an Irish entity for European customers | EU Standard Contractual Clauses |
Stripe is only involved once you subscribe. During a free trial nothing is sent to Stripe and no payment record exists.
Your card details are entered into a form Stripe serves and go straight to Stripe. They never reach Dawn's servers and we never hold them. What we can see afterwards is whether a subscription is in force and whether the last payment worked, and that comes to us from Clerk rather than from Stripe: Clerk Billing is the product we use, and Stripe is who it settles through. There is no separate Stripe account of yours for us to read.
Anthropic is reached against an API key you supplied where you have supplied one, and therefore under your own agreement with Anthropic and billed to your own Anthropic account; otherwise against ours, under our agreement with Anthropic and billed to us. What is sent is the same either way, and neither key changes how the data is handled at Anthropic. If you never use the assistant and never use your inbound address, nothing from your account is sent to Anthropic at all.
3. Not on this list
Nobody else touches your data. In particular there is no advertising network, no data broker, no customer data platform, no session recording or heatmap tool, and no error-tracking service holding your content.
Apple distributes the iOS app, and Apple's own App Store analytics are Apple's, collected under Apple's terms and never passed to us in a form that identifies anybody. Apple is not a sub-processor of your Dawn account.
4. Changes
We will publish a new or replacement sub-processor on this page, with a new date at the top, at least thirty (30) days before it starts processing personal data, except where an urgent replacement is needed to keep the Service secure or running, in which case we will publish it as soon as we can and say why.
To be told when this page changes, write to privacy@dawn.am and ask.
Contact
Questions about a sub-processor, or an objection to one: privacy@dawn.am
Magma Company GmbH. Details on the Impressum.