Last updated: 19 October 2026 Version: 1.2
Changes in this version apply to existing accounts from 18 November 2026.
beebeeb.io (InitLabs B.V.) uses a limited number of sub-processors and external service providers to deliver its service. This page contains the current list.
This list is binding for our Data Processing Agreement (Article 6 and Annex 3) and is updated when sub-processors are added, replaced or removed. We inform our business customers at least thirty (30) days in advance of changes, so they have the opportunity to object.
Stay informed of changes
We publish changes on this page. Business customers will be notified of intended additions or replacements in accordance with the Data Processing Agreement.
Active sub-processors
Infrastructure and hosting
|
Sub-processor |
Role |
Location |
Data processed |
In use since |
|
Hetzner Online GmbH |
Processor |
Germany and Finland (EEA) |
Encrypted content, account and metadata, technical logs, encrypted backup data |
7 May 2026 |
Payment processing
|
Sub-processor |
Role |
Location |
Data processed |
In use since |
|
Mollie B.V. |
Processor (payment processing) and independent controller (fraud prevention and compliance) |
Amsterdam, the Netherlands (EEA); licensed as an electronic money institution with the Dutch Central Bank under relationship number F0038 |
Name, email address, transaction data, payment-method reference, mandate details |
30 August 2026 |
|
Stripe Payments Europe Ltd. — former payment processor |
Stripe was used for checkout and payment-method updates (7 May 2026 – 30 August 2026); no longer used. The remaining legacy path was disabled on 24 September 2026 and sends no data. |
Ireland (EEA); no data transfers since the legacy path was disabled on 24 September 2026 |
Name, email address (until the legacy path was disabled on 24 September 2026) |
7 May 2026 – 24 September 2026 |
Payment note: Mollie has a dual role. As a processor, Mollie follows our instructions to take payments. As an independent controller, Mollie processes data for its own legal purposes such as fraud and identity screening, anti-money laundering legislation and sanctions screening. Payment pages are hosted by Mollie, so no payment provider script or cookie runs on beebeeb.io. If you pay by card, the card networks (Visa, Mastercard, American Express) and the issuing and acquiring banks are unavoidably part of the authorisation path and are established outside the EEA; payments by iDEAL and SEPA Direct Debit stay entirely on European rails. See also our Privacy Policy section 4.
Not classified as sub-processors
The following systems are not sub-processors because they are operated in-house or self-hosted by beebeeb.io within its own infrastructure in the EEA:
- Transactional email — self-hosted within EEA infrastructure; no third-party email provider is used
- Customer support — handled internally; no external helpdesk tool is used
- Accounting and bookkeeping — handled internally; no external accounting software or accountant processes personal data
- Matomo Analytics (self-hosted in EEA) — we do not share analytics data with third parties
- Authentication and session management — own system
- Key derivation services — performed on the user's device (Zero-Knowledge)
Sub-contractors of sub-processors
Our sub-processors in turn use their own sub-contractors. These are governed by the agreement between beebeeb.io and the relevant sub-processor. Information about the parties a sub-processor engages is available from that sub-processor (for example, Mollie describes this in its privacy statement at mollie.com/legal/privacy).
Change history
|
Date |
Change |
Type of change |
|
7 May 2026 |
First publication of the list |
— |
|
30 August 2026 |
Payment processing moved to Mollie B.V. (Amsterdam, the Netherlands) for checkout and payment-method updates. Stripe Payments Europe Ltd. is retained above as a legacy entry, not deleted, because one legacy internal path can still reach it until that path is removed. |
Replacement (in progress) |
|
24 September 2026 |
Legacy Stripe path disabled; Stripe no longer receives data. |
Decommissioning |
|
19 October 2026 |
Hetzner Online GmbH: the location now reads Germany and Finland (EEA), because stored data is also kept in a data centre in Finland. Previously listed as Germany only. |
Change of location |
Objection to sub-processors
Business customers can object to a new or replaced sub-processor within fourteen (14) days after our notification. You may direct objections to legal@beebeeb.io. We will discuss the objection by mutual agreement. If we cannot find a solution, you have the right to terminate the agreement for the part that cannot reasonably be continued without the relevant sub-processor, in accordance with Article 6.3 of our Data Processing Agreement.
Contact
Questions about this list or about a specific sub-processor? Please contact us at legal@beebeeb.io or privacy@beebeeb.io.
— End of Sub-processor List —