Sub-Processors
Last updated: July 6, 2026
To operate twocal we rely on a small number of third-party service providers ("sub-processors") that may process your data on our behalf. We share the minimum data each provider needs, and we do not sell or rent your personal data. This page lists our current sub-processors and serves as the reference for Exhibit A of our Business Associate Agreement, available to customers who require one.
Current sub-processors
| Sub-processor | Purpose | Region | Data handled |
|---|---|---|---|
| Fly.io, Inc. | Application hosting (API + workers) | United States | Account data and calendar event data processed in application compute |
| Neon, Inc. | Managed PostgreSQL database | United States | Account data and calendar event metadata/content stored at rest (encrypted) |
| Cloudflare, Inc. | CDN, static frontend hosting, and cookieless web analytics | Global edge network | Static assets and aggregate visit metrics — no calendar data |
| Stripe, Inc. | Payment processing | United States | Billing and customer records — no calendar data |
| Postmark (ActiveCampaign, LLC) | Transactional email (sign-in links, service notices) | United States | Email address and delivery logs (expire ~45 days) — no calendar data |
| Sentry (Functional Software, Inc.) | Error monitoring | United States | Diagnostic error events (expire ~90 days); calendar event content is scrubbed |
| Google LLC | Google Analytics — aggregate web analytics and sign-up measurement | United States | Aggregate visit and sign-up metrics — no calendar data |
Your calendar providers
Google and Microsoft are not twocal sub-processors. You authorize them directly under your own agreements with those providers, and twocal accesses your calendars on your behalf only to perform the sync you configure. See our Privacy Policy for how that data is handled.
Changes to this list
We may add or replace sub-processors as the Service evolves. When we do, we update this page; where a Business Associate Agreement is in place, we provide advance notice of new sub-processors as required by that agreement.
Contact
Questions about our sub-processors? Email us at [email protected].