The service providers we rely on to run Rigaway. We share personal data with them only as needed to operate the service, under contract. We don't sell personal data.
Last updated: October 18, 2026.
| Provider | Purpose | Region |
|---|---|---|
| Cloudflare | CDN, DNS, and edge serving; storage, databases, and logs for hosted websites; receiving email and webhooks for automations; cloud-desktop archives; nightly backups of our account database; CSAM scanning | USA / global |
| Resend | Transactional email (sign-in codes, private-website access codes, team invites, waitlist confirmations) | USA |
| Google Workspace | Company email (support, privacy, legal, and other inboxes) | USA / global |
| Apple / Google | In-app purchases (merchant of record), optional sign-in, push notification delivery | USA / global |
| RevenueCat | Subscription status management for in-app purchases | USA |
| Expo | Push notification relay | USA |
| GitHub | Optional sign-in | USA |
| Fly.io | Optional managed cloud desktops (stores the files on your cloud desktop) | USA (default region: Ashburn, Virginia) |
| OVHcloud | Control-plane servers and the control database (accounts, API, connection signaling); encrypted relays | USA (Hillsboro, Oregon; Vint Hill, Virginia) |
Our relays forward end-to-end encrypted traffic between your own devices and can't read it; we connect each device to the relay nearest to it. Personal data that leaves the EEA, UK, or Switzerland is protected as described in our Privacy Policy. For hosting and cloud-desktop customers, these providers are our sub-processors under our Data Processing Addendum.
AI providers you use with Rigaway (for example Anthropic, OpenAI, or GitHub Copilot) aren't on this list: your agents talk to them directly from your computer under your own account and agreement with them, and we don't send them your data.
We update this list as our providers change, and before a new subprocessor starts handling personal data. Questions: privacy@rigaway.com. See also our Privacy Policy.