Subprocessors
This page lists the third parties engaged by Linnx Solutions UG (haftungsbeschränkt) in the provision of the Linnx service. It forms part of the Data Processing Agreement at linnx.ai/dpa and of the Privacy Policy at linnx.ai/privacy.
Each provider is engaged under a written agreement meeting the requirements of Art. 28 GDPR. Where processing occurs outside the European Economic Area, the safeguard relied upon is stated. The primary safeguard in every case is the Standard Contractual Clauses adopted by Commission Implementing Decision (EU) 2021/914. Where a provider is additionally certified under the EU-U.S. Data Privacy Framework, that certification is treated as supplementary and not as the primary safeguard.
1. Subprocessors of Customer Data
These providers process Customer Data, or the account data through which it is accessed.
| Provider | Purpose | Legal entity and location | Data processed | Transfer safeguard |
|---|---|---|---|---|
| Unipile | LinkedIn access: retrieval of messages, connections, connection requests, posts and metrics; transmission of your message and invitation actions | Unipile, 168 rue de la Rotonde, 42153 Riorges, France. Processing on Scaleway infrastructure in France | All LinkedIn data described in Section 5 of the Privacy Policy | None required (EEA) |
| Railway | Application hosting and runtime | Railway Corp., United States. Processing in Amsterdam, Netherlands (EEA) | All Customer Data in transit and in process | Processing is within the EEA. SCCs are in place in respect of remote access from the United States |
| Neon | Managed PostgreSQL database | Neon, LLC, a subsidiary of Databricks, Inc., United States. Processing in Frankfurt, Germany (EEA) | All Customer Data at rest | Processing is within the EEA. SCCs are in place in respect of remote access from the United States |
| Cloudflare | Object storage for cached profile images and post media | Cloudflare, Inc., United States. Processing in the European Union | Profile images and media files | Processing is within the EEA. SCCs are in place in respect of remote access from the United States |
| Clerk | Authentication and account identity | Clerk, Inc., United States | Name, email address, authentication identifiers, profile image | SCCs |
Linnx applies artificial intelligence and machine learning to Customer Data only as permitted by Clause 16.5 of the Terms of Service. Where a third party model is used, its provider is listed in the table above and Clause 7 of the Data Processing Agreement applies. Where the model is operated by Linnx within its own systems, no Customer Data is transmitted to any third party and no subprocessor is engaged.
Each provider listed above operates its own systems, which Linnx does not control, and may apply automated techniques within them to deliver, secure and maintain its services. Each is engaged under an agreement meeting Art. 28 GDPR which permits it to process Customer Data only on Linnx's behalf. Aggregated Data, which is irreversibly anonymised and is not personal data, is addressed at Clause 16 of the Terms of Service and Section 16 of the Privacy Policy.
2. Service providers for Linnx's own processing
These providers process data for which Linnx is the controller. Except as stated in the table below, Linnx does not transmit the LinkedIn data held in your Linnx account to them.
| Provider | Purpose | Legal entity and location | Data processed | Transfer safeguard |
|---|---|---|---|---|
| Stripe | Payment processing and subscription management | Stripe Payments Europe, Ltd., Ireland, and Stripe, Inc., United States | Name, email address, billing address, subscription and payment status. Card data is processed by Stripe and is not received by Linnx | SCCs |
| Resend | Transactional email and newsletter delivery | Resend, Inc., United States. Processing in Ireland (EEA) | Name, email address, message content, delivery and engagement events | Processing is within the EEA. SCCs are in place in respect of remote access from the United States |
| Email hosting for the Linnx addresses, including the support, privacy and legal enquiry addresses | Google LLC, United States. Processing in Europe under Google Workspace data regions (EEA) | The sender's name and email address, and the content of any message sent to a Linnx address, including anything the sender chooses to include in it | Processing is within the EEA. SCCs are in place in respect of remote access from the United States, and Google LLC is certified under the EU-US Data Privacy Framework | |
| PostHog | Product analytics and error diagnostics | PostHog, Inc., United States. Processing on EU Cloud in Frankfurt, Germany (EEA) | Usage events, feature interactions, errors, browser and device characteristics, approximate location, and the account identifier. Two events carry more when sent: account creation carries the email address and LinkedIn connection carries the LinkedIn display name. Linnx removes both within the provider, so that only the account identifier is retained. See Section 7.4 of the Privacy Policy. Linnx transmits no message content. Configured not to retain raw IP addresses | Processing is within the EEA. SCCs are in place in respect of remote access from the United States |
| cron-job.org | Scheduled execution of background tasks | cron-job.org, Germany | No personal data. Authenticated requests to Linnx endpoints only | None required (EEA) |
| Integral Services GmbH | Accounting and bookkeeping platform, into which invoice and transaction records are uploaded | Integral Services GmbH, Berlin, Germany | Invoice and transaction records, including name, email address and billing address | None required (EEA) |
Where a provider listed above itself relies on infrastructure operated by a third party, that arrangement is governed by that provider's own agreements and is disclosed in that provider's documentation rather than here.
3. Other recipients
Linnx discloses data to its external tax advisers, Integral Tax GmbH Wirtschaftsprüfungsgesellschaft, Schönhauser Allee 148, 10435 Berlin. They act under their own professional responsibility and statutory duty of confidentiality and are recipients rather than processors, not subject to instruction by Linnx. Linnx provides them with invoice and accounting records only, and transmits none of the LinkedIn data held in customers' Linnx accounts to them.
4. Services you connect yourself
The following act on your instruction and outside Linnx's subprocessing chain. Linnx does not engage them, and they are not subprocessors of Linnx. Where a provider named below also appears in the tables above, it is listed there because Linnx engages it for its own purposes, not because you have connected it.
LinkedIn. LinkedIn Ireland Unlimited Company operates the LinkedIn platform and is an independent controller in respect of it. Linnx accesses LinkedIn on your behalf using credentials you supply.
Any AI Client you connect through the MCP Connector. You choose it, you contract with it, you configure it and you instruct it. Once data reaches that AI Client, Linnx cannot observe, restrict, retrieve or delete it, and cannot determine whether it is retained, logged or used to train a model. That processing is governed by your own agreement with its provider. Section 8 of the Privacy Policy and Clause 6 of the Terms of Service apply.
5. Changes to this list
Linnx will notify you of the addition or replacement of a subprocessor, by electronic mail to the address registered on your account and by publication on this page, not less than thirty (30) days before that provider begins processing, or as early as reasonably practicable where a change is urgent.
You may object on reasonable data protection grounds before the change takes effect, in text form to legal@linnx.ai, stating your grounds. If you do not object before that date the change is treated as accepted. An objection does not stop the change going ahead. If you object and the matter cannot be resolved, you may terminate with effect from the date the change takes effect, and Linnx will refund fees paid for the unused remainder of the term. Clause 7 of the Data Processing Agreement applies.
6. Contact
Questions regarding this page: privacy@linnx.ai
Linnx Solutions UG (haftungsbeschränkt) Kollwitzstraße 76, 10435 Berlin, Germany Amtsgericht Charlottenburg, HRB 290197 B