Legal
Sub-processors
The third parties that process personal data for OneLence, where they process it and how transfers are protected.
Last updated: October 21, 2026
OneLence is operated by Crelora GmbH in Germany. Our main database is hosted in the EU (Stockholm, Sweden) and our analytics storage in the EU (Frankfurt, Germany). The providers below process personal data on our behalf under written data protection terms, as described in our Data Processing Agreement.
Infrastructure
These providers run OneLence for every customer.
- SupabaseSupabase Pte. Ltd., Singapore
- PurposeMain database, authentication and backend functions
- Processing locationStored data: EU, Stockholm, Sweden (AWS eu-north-1)
- Transfer mechanismStandard Contractual Clauses (2021/914) for any access from outside the EEA
- TinybirdTinybird, Inc., USA
- PurposeAnalytics database for events, sessions and attribution
- Processing locationStored data: EU, Frankfurt, Germany (AWS eu-central-1)
- Transfer mechanismStandard Contractual Clauses (2021/914) for any access from outside the EEA
- CloudflareCloudflare, Inc., USA
- PurposeApplication hosting, content delivery, security and event ingestion
- Processing locationGlobal edge network, including the EU
- Transfer mechanismEU-U.S. Data Privacy Framework; Standard Contractual Clauses (2021/914) as fallback
- StripeStripe Payments Europe, Limited, Ireland
- PurposeSubscription billing and payment processing
- Processing locationEU and USA (Stripe, LLC)
- Transfer mechanismEU-U.S. Data Privacy Framework; Standard Contractual Clauses (2021/914)
AI features
These providers process data only when you use the AI assistant and AI-generated recommendations in OneLence. They do not use the data to train their models.
- OpenAIOpenAI Ireland Ltd., Ireland
- PurposeAI assistant and generated recommendations
- Processing locationUSA
- Transfer mechanismStandard Contractual Clauses (2021/914)
- Google (Gemini API)Google LLC, USA
- PurposeAI assistant and campaign message analysis
- Processing locationUSA and other countries where Google operates
- Transfer mechanismEU-U.S. Data Privacy Framework; Standard Contractual Clauses as fallback
Integrations you connect
When you connect your own accounts, such as Google Search Console, Google Ads, Meta, TikTok, LinkedIn, Microsoft Advertising, Bing Webmaster Tools, Shopify or Stripe, OneLence reads data from them on your instructions. Those providers act under your own agreement with them and are not our sub-processors.
Changes to this list
We inform customers of any intended addition or replacement of a sub-processor at least 30 days in advance, by email to the workspace owner and by updating this page. Customers may object as described in section 6 of our Data Processing Agreement.
Contact
Questions about our sub-processors or data protection: [email protected]. Crelora GmbH, Ernst-Thälmann-Straße 41, 06686 Lützen, Germany.
