Subprocessors
Last updated: 17 September 2026 · Version 1.0
This page lists the service providers that process personal data for Nova Data Analytics (NDA). Section A lists the subprocessors that process Customer Personal Data on our customers' behalf, under our Data Processing Agreement. We inform customers at least thirty (30) days before adding or replacing a subprocessor in Section A. Section B lists the providers we use, as controller, for our website, marketing and business operations, as described in our Privacy Policy.
Nova is hosted in France. When a provider processes personal data outside the European Economic Area, the transfer relies on the Standard Contractual Clauses adopted by the European Commission (Implementing Decision (EU) 2021/914), as shown in the last column.
A. Subprocessors of the Services
| Provider | Purpose | Personal data concerned | Location | Transfer safeguard |
|---|---|---|---|---|
| Scaleway SAS | Hosting of the application, its databases and the analytics warehouse | All Customer Data | France (Paris region) | No transfer outside the EU |
| Cloudflare, Inc. | Network security, content delivery and storage of backup copies | Network traffic data, backup copies | Global network; backups in Western Europe | Standard Contractual Clauses (2021/914) |
| Render Services, Inc. | Execution of data pipelines during our infrastructure migration | Data retrieved from Amazon, technical logs | Germany (Frankfurt) | Standard Contractual Clauses (2021/914) |
| Resend | Sending service and account emails | Name, email address, email content | United States | Standard Contractual Clauses (2021/914) |
| Intercom R&D Unlimited Company | Support chat and support conversations | Name, email address, role, organisation, messages | United States | Standard Contractual Clauses (2021/914) |
| Mixpanel, Inc. | Product analytics and session recordings in the App | User identifiers, email address, usage data, session recordings | European Union | Data stored in the EU |
| Google Ireland Limited and Google LLC | Analytics on App pages and sign-in with Google | Identifiers, usage data, IP address, email address for Google sign-in | European Union and United States | Standard Contractual Clauses (2021/914) |
| Functional Software, Inc. (Sentry) | Error monitoring | Technical data, IP address, user identifiers | Germany, provider based in the United States | Standard Contractual Clauses (2021/914) |
| WorkOS, Inc. | Authentication for the Nova MCP Connector | User identifier, email address | United States | Standard Contractual Clauses (2021/914) |
| Stripe Payments Europe, Limited | Payments and invoicing | Billing data, payment data | Ireland and United States | Standard Contractual Clauses (2021/914) |
| Slack Technologies | Internal notifications to the Nova team about account activity | Email address of the account owner, organisation name, seller identifier, plan | United States | Standard Contractual Clauses (2021/914) |
| Anthropic | AI assistance for the Nova team, such as drafting support replies and analysing account data to answer customer questions | Support messages, account and usage data, business data | United States | Standard Contractual Clauses (2021/914) |
B. Providers for our website, marketing and business operations
| Provider | Purpose | Personal data concerned | Location | Transfer safeguard |
|---|---|---|---|---|
| Lovable Labs Incorporated and Supabase, Inc. | Hosting of novadata.io, website forms and visit statistics | Form data (name, email, company), visit data | United States | Standard Contractual Clauses (2021/914) |
| Google Ireland Limited and Google LLC | Website analytics and Google Ads measurement, with consent; business email (Google Workspace) | Cookie identifiers, browsing data, IP address, communications | European Union and United States | Standard Contractual Clauses (2021/914) |
| Meta Platforms Ireland Limited | Advertising measurement and audiences, with consent for the Meta Pixel; hashed email lists | Cookie identifiers, browsing data, hashed email addresses | Ireland and United States | Standard Contractual Clauses (2021/914) |
| lemlist SAS | Business prospecting emails and website visitor identification, with consent | Professional contact data, IP address and browsing data | France | No transfer outside the EU |
| Calendly LLC | Demo booking | Name, email address, booking details | United States | Standard Contractual Clauses (2021/914) |
Contact
For any question about our subprocessors, contact [email protected].