Sub-processors
Last updated
Magma Company GmbH ("Dawn", "we", "us") uses the third parties listed below to operate the Service. Each is bound by a data processing agreement, each receives only what its one job needs, and none of them may use what they receive for their own purposes.
This is a page of its own rather than a paragraph in the Privacy Policy so that it can change without that document changing — which is what makes the notice commitment in section 4 possible to keep.
1. Always
These are involved in every account, because there is no version of the Service without them.
| Sub-processor | What it does | Processes | Location | Transfer basis |
|---|---|---|---|---|
| DigitalOcean, LLC | Runs the application and its Postgres database, and holds the backups | Everything in your account | Frankfurt, Germany (EU) | Hosting within the EU — no transfer |
| Clerk, Inc. | Signs you in, holds your password and manages your session | Email address, name, profile picture, authentication events, IP address | United States | EU Standard Contractual Clauses |
| Resend | Sends the mail Dawn sends: invitations, share notifications, RSVP replies, account notices | Recipient address, sender address, message content | United States | EU Standard Contractual Clauses |
| PostHog, Inc. | Counts how the Service is used | Usage events, browser and device type, approximate location from IP address. Never the content of your account. | European Union | EU Cloud — no transfer |
| Vercel Inc. | Serves these documents at legal.dawn.am | IP address and user agent, in ordinary request logs. Nothing from any account — this site is static files, has no database and sets no cookies. | Global CDN, company in the United States | EU Standard Contractual Clauses |
PostHog is only involved where you have consented to analytics. See the Cookie Policy.
Vercel is listed because it sees the request when you read this page. It is deliberately a different provider from the one the application runs on: these documents exist to be readable when the application is not, which they would not be if one incident could take out both.
2. Only if you use the feature
| Sub-processor | What it does | Processes | Location | Transfer basis |
|---|---|---|---|---|
| Anthropic, PBC | Answers the assistant, and reads email you forward to your private inbound address | Your instruction and whatever your account the tools it calls read; the text and attachments of a message you forwarded | United States | EU Standard Contractual Clauses |
Anthropic is reached only against an API key you supplied, and therefore under your own agreement with Anthropic and billed to your own Anthropic account. If you configure no key and never use your inbound address, nothing from your account is sent to Anthropic at all.
3. Not on this list
Nobody else touches your data. In particular there is no advertising network, no data broker, no customer data platform, no session recording or heatmap tool, and no error-tracking service holding your content.
Apple distributes the iOS app, and Apple's own App Store analytics are Apple's, collected under Apple's terms and never passed to us in a form that identifies anybody. Apple is not a sub-processor of your Dawn account.
4. Changes
We will publish a new or replacement sub-processor on this page, with a new date at the top, at least thirty (30) days before it starts processing personal data — except where an urgent replacement is needed to keep the Service secure or running, in which case we will publish it as soon as we can and say why.
To be told when this page changes, write to privacy@dawn.am and ask.
Contact
Questions about a sub-processor, or an objection to one: privacy@dawn.am
Magma Company GmbH — details on the Impressum.