Data Processors (subprocessors)
Effective from: August 10, 2026
This page contains a complete overview of the processors and recipients of personal data that FixIt App s.r.o. (Company ID 23725681) uses in operating the platform. It forms part of, and follows on from, our Privacy Policy, and is maintained separately so that it can be continuously updated without the need to amend the main legal documents.
I. Infrastructure and Hosting
| Processor | Purpose | Location |
|---|---|---|
| Hetzner Online GmbH | Hosting of the application, API, and database; file storage | Germany (EU) |
| Amazon Web Services (S3) / Hetzner Object Storage | Optional storage of files and attachments | EU |
| Self-hosted Sentry | Error monitoring (with the sending of PII turned off, sendDefaultPii: false) | Own infrastructure (EU) |
II. Payments and Identity Verification
| Processor | Purpose | Location |
|---|---|---|
| Stripe (Stripe Payments Europe, Ltd. and affiliated companies) | Payment processing (Connect Express, Customers, Billing) and verification (Identity) | EU / USA |
| Bank iD | Identity verification (bank identity, OIDC) | Czech Republic (EU) |
| Bank iD SIGN | Advanced electronic document signatures and Bank iD's qualified seal | Czech Republic (EU) |
III. Processing of Content by Artificial Intelligence
| Processor | Purpose | Location |
|---|---|---|
| OpenRouter | Intermediary gateway to AI models | USA |
| OpenAI | Analysis of job text and images (GPT-family models) | USA |
| Anthropic | Analysis of job text (Claude-family models) | USA |
The descriptions and photos of the problem from jobs are sent to the AI models – see Privacy Policy, Art. IV. Internally, the LiteLLM gateway (operated within our infrastructure) is used to route requests.
IV. Sign-in, Notifications, and Communication
| Processor | Purpose | Location |
|---|---|---|
| WorkOS | Authentication and sign-in management | USA |
| Sign-in (OAuth) and geocoding (Maps) | EU / USA | |
| Apple | Sign-in (Sign in with Apple, OAuth) | EU / USA |
| Expo | Delivery of push notifications to the mobile application | USA |
| Cloudflare Turnstile | Protection of the public inquiry form against bots | EU / USA |
| Email service provider (SMTP) | Sending transactional and system emails | as per the provider |
| Telegram | Internal operational notifications (may include operational context) | as per the provider |
V. Analytics
| Processor | Purpose | Location |
|---|---|---|
| Umami (self-hosted) | Website traffic analytics without cookies and without collecting personal data | Own infrastructure (EU) |
VI. Statutory Recipients (Public Authorities)
The following authorities are not processors but recipients of data on the basis of legal obligations (this concerns in particular workers on DPP/DPČ – see Cooperation Terms for Workers):
| Recipient | Purpose |
|---|---|
| Czech Social Security Administration (ČSSZ) | Monthly DPP Statement, employer registration (REGZEC), and related reports |
| Financial Administration (adisepo / MOJE daně systems) | Tax settlement and related tax reports |
VII. Changes to the List
We update this list on an ongoing basis. We inform of significant changes to the range of processors in the manner set out in the Privacy Policy.
Last updated: July 10, 2026