Legal
Subprocessors
Last updated: October 28, 2026
These companies process personal data that NanoTech handles for Roovie customers. Each is bound by written data-protection terms, and AI providers may not train their models on customer project information. Customers' administrators get 30 days' email notice before a new subprocessor starts, with the right to object, as Section 7 of the Data Processing Addendum describes.
Subprocessors
| Company | What it does | Data it receives | Location |
|---|---|---|---|
| Heroku (Salesforce, Inc.) | Application hosting for the Roovie portal and API | All Service data in transit and in use | United States |
| MongoDB, Inc. (MongoDB Atlas) | Primary database and its backups | Account, project, model, and results data | United States |
| Amazon Web Services, Inc. | File storage, results storage, and encryption key management | Uploaded files, drawings, exports, and simulation results | United States |
| Hetzner Online GmbH | Simulation computing | Building models and simulation inputs and results | United States (Ashburn, Virginia) |
| Clerk, Inc. | Sign-in, user accounts, and organization membership | User names, email addresses, phone numbers, and sign-in records | United States |
| OpenAI, L.L.C. | AI processing for drawing reading, model correction, and assistants | Project content sent for AI-assisted features | United States |
| Anthropic, PBC | AI processing for drawing reading, model correction, and assistants | Project content sent for AI-assisted features | United States |
| Postmark (ActiveCampaign, LLC) | Service email: invitations, notifications, and results | Recipient names and email addresses, message content | United States |
| Twilio Inc. | Text messages and phone verification for users who opt in | Phone numbers and message content | United States |
| Mapbox, Inc. | Maps and address lookup | Building addresses and map views | United States |
| Google LLC (Google Maps Platform) | Address lookup and map imagery | Building addresses and map views | United States |
Other service providers
These handle NanoTech's own business information, such as website visits, sales contacts, and billing, rather than customer project data.
| Company | What it does | Data it receives | Location |
|---|---|---|---|
| Stripe, Inc. | Payments and billing | Billing contacts and payment details (Roovie does not store full card numbers) | United States |
| HubSpot, Inc. | Sales and customer relationship records | Business contact details, waitlist and estimate-form entries | United States |
| Google LLC (Google Tag Manager and analytics) | Website analytics on roovie.com (not the portal) | Website usage and device information | United States |
| Cloudflare, Inc. (Turnstile) | Bot protection on public forms | Browser and device signals | United States |
Questions about this list: privacy@roovie.com.