Subprocessors
CanvaScreens is operated by BuiltPOS LLC. Last updated: 3 September 2026
In short
Five companies, and this is all of them. One hosts everything, one takes payments, two are point of sale providers that are only involved if you choose to connect them, and one issues our TLS certificates.
There is no analytics vendor, no advertising network, no CDN, no customer data warehouse and no AI provider on this list, because we do not use any.
1. The list
| Subprocessor | What they do | Where they process | When they are involved |
|---|---|---|---|
| Hetzner Online GmbH | Server hosting, database hosting, backups | Falkenstein, Germany | Always. Every part of CanvaScreens runs here. |
| Stripe, Inc. | Payment processing, card storage, invoicing | United States | When you pay us by card. |
| Toast, Inc. | Point of sale menu sync | United States | Only if you connect Toast. |
| Clover Network, LLC | Point of sale menu sync | United States | Only if you connect Clover. |
| Let's Encrypt (Internet Security Research Group) | TLS certificate issuance | United States | Always. This is what makes the padlock work. |
2. What each one actually receives
- Hetzner Online GmbH. All CanvaScreens data, at rest and in transit through the server.
- Stripe, Inc.. Billing contact details, card data entered directly with Stripe, subscription and invoice records.
- Toast, Inc.. Your Toast credentials and restaurant identifier, sent to authenticate; menu data returned to us.
- Clover Network, LLC. Your Clover merchant identifier and API token, sent to authenticate; menu data returned to us.
- Let's Encrypt (Internet Security Research Group). Our own domain names only. No customer data is sent.
3. Where this leaves your data
The database is in Germany. Stripe, Toast, Clover and Let's Encrypt are US companies, so specific data does cross the Atlantic for specific purposes — a payment, a menu sync, a certificate renewal. Where personal data leaves the EEA in that way, the transfer relies on the European Commission's Standard Contractual Clauses or the equivalent mechanism in that provider's own data processing terms.
The Privacy Policy explains what it means for a US business to have its data processed in the European Union, and says plainly what we cannot currently offer.
4. How we choose them
We add a subprocessor only when the product cannot work without it, and we keep the list short on purpose. Before we add one, we check that it publishes a data processing agreement, that it commits to security standards at least as strong as ours, and that it is contractually bound to use the data only to provide its service to us.
5. Changes to this list
When we plan to add or replace a subprocessor, we update this page and email account administrators at least 30 days before the change takes effect.
If you object to a new subprocessor on reasonable data protection grounds, reply to that email. We will try to resolve it. If we cannot, you may cancel the affected part of your subscription without penalty and we will refund any prepaid fees for the period after cancellation.
To be notified of changes, or to request a signed Data Processing Agreement listing these subprocessors, email hello@canvascreens.com.