Sub-processor List
Last updated: February 27, 2026
Overview
ConvertIntoMP4 uses the third-party service providers listed below ("sub-processors") to assist in providing, maintaining, and improving our file conversion service. Each sub-processor has been evaluated for their security practices and data protection measures. We maintain data processing agreements (DPAs) with all required sub-processors.
Current Sub-processors
| Service | Purpose | Location | Required |
|---|---|---|---|
| Hetzner Cloud | Server infrastructure and compute | Helsinki, Finland (EU) | Required |
| Cloudflare | CDN, DNS, DDoS protection, R2 object storage, Turnstile bot protection | Global edge network (EU primary) | Required |
| DodoPayments | Payment processing and subscription management | United States | Required |
| Resend | Transactional email delivery | United States | Required |
| Sentry | Error monitoring and performance tracking | United States | Required |
| PostHog | Product analytics | EU servers (Frankfurt, Germany) | Optional |
| Better Stack (Logtail) | Log aggregation and uptime monitoring | European Union | Optional |
| Svix | Webhook delivery and management | United States | Optional |
Sub-processor Details
Hetzner Cloud
Purpose: Server infrastructure and compute
Data processed: All user data, uploaded files, conversion processing
Location: Helsinki, Finland (EU)
Cloudflare
Purpose: CDN, DNS, DDoS protection, R2 object storage, Turnstile bot protection
Data processed: HTTP requests, IP addresses, uploaded/converted files (R2), bot detection tokens
Location: Global edge network (EU primary)
DodoPayments
Purpose: Payment processing and subscription management
Data processed: Billing information, email, subscription status, transaction history
Location: United States
Resend
Purpose: Transactional email delivery
Data processed: Email addresses, email content (password resets, conversion notifications, weekly summaries)
Location: United States
Sentry
Purpose: Error monitoring and performance tracking
Data processed: Error logs, stack traces, browser metadata, anonymized user context (90-day retention)
Location: United States
PostHog(Optional)
Purpose: Product analytics
Data processed: Anonymous usage events, feature interaction data, session replays
Location: EU servers (Frankfurt, Germany)
Better Stack (Logtail)(Optional)
Purpose: Log aggregation and uptime monitoring
Data processed: Server logs, error traces, performance metrics (30-day retention)
Location: European Union
Svix(Optional)
Purpose: Webhook delivery and management
Data processed: Webhook payloads, delivery metadata, endpoint URLs
Location: United States
Data Location
Our primary infrastructure is hosted in the European Union (Helsinki, Finland) on Hetzner Cloud. File storage uses Cloudflare R2 with EU-primary routing. Payment processing is handled by DodoPayments. Some sub-processors (DodoPayments, Resend, Sentry, Svix) operate from the United States. For all US-based sub-processors, we rely on Standard Contractual Clauses (SCCs) as the legal mechanism for data transfers outside the EU/EEA.
Change Notifications
We will update this page whenever we add or remove a sub-processor. To be notified of changes:
- Email notification: Registered users with an active paid plan will be notified via email at least 30 days before a new sub-processor begins processing personal data.
- Manual check:You can bookmark this page and check the "Last updated" date.
- DPA subscribers: If you have executed a Data Processing Agreement with ConvertIntoMP4, you will receive direct notification per the terms of that agreement.
Objection Process
If you object to a new sub-processor, you may contact us at [email protected] within 30 days of the notification. We will work with you in good faith to resolve any concerns. If we cannot resolve your objection, you may terminate your subscription in accordance with our Refund Policy.
Contact
For questions about our sub-processors, contact us at [email protected]