Scope and operator
This page supports Redomon’s global B2B SaaS. The operator is based in Argentina; the service is not limited to the Argentine market. Applicable privacy and other mandatory laws depend on the relevant processing and jurisdiction.
Redomon is operated by Manuel García Nicastro, CUIT 20-50046009-2, La Plata, Argentina. Contact hello@redomon.com for the current provider record, contractual safeguards and change notices. This page distinguishes processing on customer instructions from providers acting for their own purposes. A provider may have different roles for different data.
Cloudflare
Cloudflare provides hosting, edge delivery, API execution, request handling, global Queue event-delivery transit, Durable Object outbox and billing-receipt storage, and object storage for customer records, files, workspace identifiers and operational metadata. The entity named in its published DPA is Cloudflare, Inc., United States. Processing includes a global edge network and provider support, not exclusively Frankfurt. Its published DPA describes the EU-US Data Privacy Framework and UK extension where applicable, and EU standard contractual clauses with a UK Addendum for qualifying restricted transfers. The applicable service configuration and onward-provider countries govern the actual processing footprint. See https://www.cloudflare.com/cloudflare-customer-dpa.
Neon and Databricks
Neon provides PostgreSQL infrastructure for workspace records, CRM and Product Analytics data. The primary database for CRM and Product Analytics, including native daily event partitions and rollups, is in Frankfurt, Germany (eu-central-1); provider administration and support may involve the United States and other disclosed onward-processing locations. Current public Neon platform terms name Databricks, Inc., United States, as parent of Neon, LLC, and incorporate the Databricks master agreement and DPA. That DPA provides EU standard contractual clauses, ordinarily Module Two or Three according to roles, and a UK Addendum for qualifying restricted transfers. An account’s accepted terms and any migration determine its applicable contracting entity; an older Neon, Inc. document is not proof of the current account contract. See https://neon.com/platform-terms and https://www.databricks.com/sites/default/files/legal/dpa-20230721.pdf.
Database partitions and rollups follow the Product Analytics active-data retention window. Provider backups have a separate lifecycle; a partition DROP does not erase all backup copies or establish a 90-day backup-erasure guarantee.
Clerk
Clerk provides authentication, user profiles, organization membership, sessions and coarse roles. It processes account administration data and customer-managed member and organization records, not CRM message bodies for authentication. Its published DPA names Clerk, Inc., United States, and describes US processing, the Data Privacy Framework where applicable and EU standard contractual clauses with the UK Addendum as applicable fallback safeguards. Its onward providers and support arrangements determine any additional countries. See https://clerk.com/legal/dpa.
AI provider requirements
AI processing requires a separately identified provider for customer-requested inference. Only the necessary prompt and selected CRM or email context may be supplied. AI inference uses zero data retention: the provider does not store inputs or outputs or use them for training. Before processing, the customer receives the provider’s legal entity, countries and applicable safeguards, and the DPA’s written-contract, verification, notice and objection conditions must be satisfied. This policy does not approve an unnamed provider or establish a signed zero-retention contract.
Polar
Polar is the merchant of record and reseller for paid transactions. It handles checkout, payment administration, transaction taxes, invoices, fraud controls and refunds and sends Redomon subscription and usage state. Its published buyer terms and DPA identify Polar Software, Inc. and affiliates, with a United States principal address. It acts as an independent controller for its sale, legal and tax purposes, not as a processor of CRM contents for those activities. Its DPA addresses processor activities separately and includes EU standard contractual clauses and a UK Addendum where applicable; those do not convert independent-controller processing into Redomon instructions. Payment and support processing may involve the United States and its disclosed partners’ countries. Redomon does not send email bodies, CRM notes or analytics event content as payment metadata. See https://polar.sh/legal/checkout-buyer-terms and https://polar.sh/legal/data-processing-addendum.
GitHub
GitHub hosts source code and deployment integration, not customer CRM content or analytics datasets. Its published customer DPA names GitHub, Inc., United States, and provides applicable international-transfer safeguards, including EU standard contractual clauses and UK arrangements. The public DPA’s product and agreement scope must apply to the purchased account before reliance on it; publication is not proof of coverage of every free or paid GitHub account. Source and developer-account processing may involve the United States and international provider operations. See https://github.com/customer-terms/github-data-protection-agreement.
Customer-selected mail providers
The mailbox providers a customer chooses to connect are ordinarily that customer’s own service providers, not providers selected by Redomon. Receiving and sending messages may transfer data through those providers and recipients in countries the customer selects. External recipients may independently control messages delivered to them. The customer must assess those transfers and contracts.
Operator access
Administrative and support access by Redomon’s individual operator from Argentina is processing by Redomon, not a fictional separate subprocessor. Argentina’s EU and UK adequacy status may support covered transfers under the relevant regime while applicable. Non-adequate onward transfers need their own applicable EU, UK or other safeguards. It does not automatically authorize all onward transfers to every provider or satisfy Argentine outbound-transfer obligations.
Change notices and safeguards
We will provide at least 30 days’ advance direct notice to the designated workspace contact before adding or replacing a customer-data subprocessor, identifying its function and processing countries. The DPA gives a reasonable data protection objection right and a termination/refund route if no acceptable alternative is available. Publication alone is not the required direct notice.
These entity and transfer descriptions identify the providers’ published standard documents, not evidence that a particular agreement, SCC annex or regional configuration has been executed for Redomon. Redomon must maintain the applicable workspace processing record and put required contracts and safeguards in place before the relevant processing. Public standard terms alone do not prove an account-specific contract, a complete country inventory or an EU-only processing restriction. Contact hello@redomon.com for the provider record and safeguards applicable to your workspace.