In short
- The Radar Just server, the admin database, the backups and the emails are with Amazon Web Services, in Frankfurt (EU).
- Phone notifications pass through Google and Apple, which see only what they say, never the parties' names; browser notifications, encrypted, through the browser's push service, which cannot read them.
- The SMS code you confirm your phone with when you make your account is sent and checked by Twilio, which gets only the number and your language.
- We do not sell data, we give it to no one for advertising, and we use no tools that track you across apps or websites.
Who processes data for us
Each only for what is written beside it, as section 7 of the notice shows.
| Provider | What they do | Where | Transfer outside the EU |
|---|---|---|---|
| Amazon Web Services EMEA SARL | Hosts the Radar Just server, Protocore's admin database and the backups; sends the emails and receives the messages sent to contact@radarjust.ro (Amazon SES); serves this website (Amazon S3 and CloudFront). | Frankfurt, Germany (EU). The website, through the CloudFront network. | The server, the backups and the emails stay in the EU. |
| Google (Firebase Cloud Messaging) | Delivers notifications to your phone. | The EU and outside it, including the US. | The EU–US Data Privacy Framework or standard contractual clauses. |
| Apple (Apple Push Notification service) | Delivers notifications to iPhones. | The EU and outside it, including the US. | The EU–US Data Privacy Framework or standard contractual clauses. |
| Twilio Ireland Limited (Twilio Verify) | Sends by SMS the code you confirm your phone with, and checks it; gets the number and your language for that. | The EU and outside it, including the US. | The EU–US Data Privacy Framework or standard contractual clauses. |
| The browsers' push services: Google, Microsoft, Mozilla and Apple | Carry notifications to your browser, encrypted: they cannot read them. | The EU and outside it, including the US. | The EU–US Data Privacy Framework or standard contractual clauses. |
| Google (Google Workspace), the team's mailbox | Receives the messages you write to us, forwarded by Amazon SES. | The EU and outside it, including the US. | The EU–US Data Privacy Framework or standard contractual clauses. |
| A messaging service | Carries the private pilot's messages, to invited participants only, and the contact requests to the Protocore team's admin chats. | Under the service's rules. | Under the service's rules. |
Other recipients, under their own rules
These do not process data for us: they get something only when you choose so, or when we email you.
| Who | What they get, and when | Transfer outside the EU |
|---|---|---|
| Google or Apple, when you sign in | Only if you choose to sign in with them: they confirm who you are and give us the identifier and the email address. We send them nothing about you or your cases, and Apple only what it gave us, to end the connection. | Under their rules: you deal with them directly. |
| Apple, email relay | If you signed in with Apple and hid your address, our emails go through Apple's relay service, which takes them to your address; Apple does not tell us that address. | The EU–US Data Privacy Framework or standard contractual clauses. |
| Your email provider | An email once sent stays with it, under its rules; you can delete it there. | You choose it. |
Who else sees data, within the service
- The Protocore team that runs the service: the admin database, also in Frankfurt (the account without its email address, the cases, names and subjects followed, the changes in the cases and the calendar), who invited whom, the access codes and the contact requests. Your name, profile details and phone, your labels, notes, personal reminders, saved items, searches and relevance profile never reach the admin database.
- Other users see only what you show them: the members of a shared group, the group's cases and your name; those you invite, your name; a client you give access to, that one case, your name, your office and your bar. Your phone is seen only by those you choose to show it to (section 2). What you follow for yourself, no other user sees.
Outside the EU
When Google, Apple, Microsoft or Mozilla process a notification outside the EU, when Twilio sends and checks a code by SMS, when Apple takes an email to your hidden address and when Google keeps the messages sent to contact@radarjust.ro, the transfer relies on the safeguards the GDPR requires (the EU–US Data Privacy Framework or standard contractual clauses).
The providers are those in section 7 of the privacy notice, in its version in force.