Sub-processors
To run next2u we rely on a small number of carefully selected third-party providers ("sub-processors") that process personal data on our behalf, under our instructions, and in accordance with Article 28 GDPR. This page lists every sub-processor that may process your personal data, what it is used for, the data involved, and where that data is handled. It forms part of our Privacy Policy.
Active sub-processors
| Sub-processor | Purpose | Data categories | Location and transfer safeguard |
|---|---|---|---|
| OpenAI | AI content moderation, automatic translation, search relevance and listing-creation assistance | Listing text, uploaded photos, username, profile picture, search queries | United States (DPA + SCCs) |
| PostHog | Product analytics and feature flags (only with your consent) | Usage and interaction events, session and device identifiers, IP address | European Union |
| Sentry | Detection and diagnosis of technical errors | Error reports, technical request context, IP address | European Union (Germany) |
| Stripe | Payment processing for paid features | Payment-method details (entered on Stripe), transaction amounts, billing name, email | EU and United States (DPA + SCCs) |
| Bird | Sending one-time codes by SMS for phone verification | Phone number, verification code | European Union (Netherlands) |
| "Sign in with Google" social sign-in | Email address, name, profile picture | United States (SCCs) | |
| Apple | "Sign in with Apple" | Email address, name | United States (SCCs) |
Hosting and infrastructure
Our core infrastructure (application servers, databases, uploaded media, search index, message queue, authentication, monitoring and map tiles) is hosted by OVHcloud in data centres located within the European Union (France, Germany and Luxembourg). OVHcloud acts as a processor on our behalf under a data processing agreement (Article 28 GDPR) and does not process your personal data for its own purposes.
Transactional and notification emails are sent through our own mail server (mail.next2u.email), which we operate within the European Union. We do not use a third-party email provider.