Sub-processors
Confirmed sub-processors, plus optional recipients listed separately for transparency. This page is separate from the privacy statement because it changes more often than the rest of it does.
Hands is a Kijko product operated by Kijko Labs B.V., a Dutch private limited company registered with the Chamber of Commerce under number 42159010, VAT ID NL869973484B01. Visiting address: Torenlaan 5 t/m 5B, 1402 AT Bussum, Netherlands. Contact: [email protected]. Phone: +31 970 065 33744.
Confirmed Hands sub-processors
| Party | What they do | Location |
|---|---|---|
| Fly.io (Sprites) | Runs your Hand: its Sprite Linux runtime and workspace, filesystem, checkpoints and the URL your AI connects to. | United States, with regions worldwide. Placement is automatic; a region cannot currently be chosen. |
| Tigris | Object storage behind the sandbox filesystem. Fly.io names it as a sub-processor for Sprites. | United States |
| Stripe | Payments and subscriptions. Stripe receives the account name, email address and internal account identifier; card details go directly to Stripe and are never held by us. | United States and Ireland |
| Resend | Delivers essential account and trial-expiry emails. Resend receives the recipient email address, message content and delivery metadata. | United States |
| Google Sign-In if you choose it, plus Google Analytics 4 only after analytics consent on the approved Hands measurement routes and milestones. Advertising features, Google Signals and user-provided data collection are not enabled. | United States and Ireland; Analytics processing also uses Google's global infrastructure and EU data controls. | |
| Nango Inc (optional BYOK) | Only when you enable Nango BYOK: stores provider authorizations in the Nango account you control and executes the explicitly allowlisted actions your Hand requests. | United States. Nango states that its DPA applies to cloud accounts and supports the EU-U.S. Data Privacy Framework. |
| Cloudflare | Serves this website and terminates TLS. | United States, with a global network |
Transfers outside the EEA
Your Hand runs on Fly.io Sprites. The Sprites create/get contract used by Hands does not currently expose a region selector or region field, and a live blank-Sprite check did not expose a runtime region variable. Hands therefore does not promise EU-only runtime or data residency. Provider confirmation about compute placement, storage, checkpoints and recovery is pending.
Where a confirmed sub-processor receives personal data outside the EEA, the applicable transfer safeguard is documented in that provider relationship, including Standard Contractual Clauses where required. The table above and our privacy statement identify the relevant provider role; we do not treat a hosting-location claim as a substitute for a lawful transfer mechanism.
Optional connected providers
The following provider receives data only when you choose and connect its account. It is listed here as a recipient for transparency, not as a confirmed Hands sub-processor. Firecrawl is not generally available in production while its contractual role and transfer safeguards are being documented. Hands may enable a controlled production preview for expressly approved test accounts.
| Party | What they receive and do | Location and terms |
|---|---|---|
| SideGuide Technologies, Inc. d/b/a Firecrawl (optional Firecrawl connector) | Only when you connect Firecrawl: receives search queries, public target URLs, filters and crawl settings, fetches or maps public pages, and returns URL or page data for the fixed Search, Scrape, Map and reviewed Crawl actions. | United States. Firecrawl is listed here as an optional provider, not as a confirmed Hands sub-processor. Provider-side processing is governed by the terms and account agreement applicable to the Firecrawl account or workspace you select. A Hands–Firecrawl processor role and transfer mechanism have not yet been documented, so production access is limited to expressly approved test accounts and is not generally available. |
Not on this list
No advertising network, tracking pixels or session recording. Google Analytics is listed above because it is now an optional consent-based sub-processor. Web fonts are served from this site rather than from Google's font CDN.
Changes
New sub-processors are added here before they start processing anything. A notification mechanism for changes is not built yet.