Sub-processors
Last update : 24/09/2026
LINKUPAPI SAS (58 Rue de Monceau, 75008 Paris, France) engages the third-party sub-processors listed below to process personal data on behalf of its customers, in accordance with our Privacy Policy and our Data Processing Agreement (DPA). Each sub-processor is bound by written data protection terms and is only given access to the data strictly needed for its purpose.
Current sub-processors
| Sub-processor | Purpose | Location of processing | Transfer mechanism |
|---|---|---|---|
| netcup GmbH (Germany) | Primary hosting of application servers and database | Vienna, Austria (EU) | Not applicable (EU) |
| Hetzner Online GmbH (Germany) | Secondary hosting: database replica and standby application servers | Helsinki, Finland (EU) | Not applicable (EU) |
| Cloudflare, Inc. (USA) | DNS, TLS termination, load balancing and protection of API traffic; hosting of the static dashboard. Data in transit only, no storage of customer data | Global edge network | EU-U.S. Data Privacy Framework (certified) and Standard Contractual Clauses |
| Brevo, Sendinblue SAS (France) | Transactional emails to customers (account, billing and service notifications) | European Union | Not applicable (EU) |
| Stripe Payments Europe, Ltd. (Ireland) | Payment processing and invoicing. Customer billing data only, no end-user data | European Union and USA | EU-U.S. Data Privacy Framework and Standard Contractual Clauses |
| Network infrastructure providers (proxy and egress services) | Routing of outbound requests to third-party platforms so that they originate from an IP address consistent with the end user's location. Data in transit only, no storage | European Union and USA; egress points in the country of the end user | Standard Contractual Clauses for providers and egress points outside the EEA |
Notes
- Customer data at rest (databases, backups, tokens, logs) is stored exclusively on servers located in the European Union.
- Network infrastructure providers only carry encrypted traffic in transit and have no access to customer data at rest. For security reasons, to protect connected accounts against targeted blocking, their identity is not disclosed. Where a customer supplies its own proxy for an account, no LinkupAPI network provider is involved for that account.
- LinkedIn, Google, Microsoft and the other platforms to which customers or their users connect their accounts are not sub-processors of LinkupAPI. They are independent third parties with which the user has a direct relationship; LinkupAPI only transmits the requests that the customer instructs it to perform.
Changes to this list
We give our customers at least thirty (30) days' notice before adding or replacing a sub-processor, by email to the data protection contact indicated in their DPA and by updating this page. Customers who wish to receive these notifications can write to privacy@linkupapi.com.
Contact
Questions about this list, or a request for our Data Processing Agreement, can be sent to privacy@linkupapi.com.
LinkedIn, email and WhatsApp through one API. Unlimited accounts, one fixed price.
Endpoints
Uptime
Avg Response