This page lists the third parties that QRolling (“QRolling,” “we”) engages to process personal data on our behalf when operating qrolling.com and the related Service. Each sub-processor is bound by a written agreement to process data only on our instructions, in accordance with our Privacy Policy, applicable data protection laws (including the GDPR), and appropriate technical and organisational measures.
The following sub-processors support the core operation of the Service for all customers.
| Provider | Function | Categories of data | Hosting region | Status |
|---|---|---|---|---|
| Akamai Technologies, Inc. — Linode Subsidiary: Akamai Technologies International AG (EU) |
Cloud compute, storage, networking, and backups for the application servers and databases. | All account and Service data at rest and in transit (encrypted). | European Union and United States (selected data centres). | Active |
| Paddle.com Market Ltd | Merchant of record — subscription billing, tax handling, fraud prevention. | Name, billing email, billing country/address, card token (tokenised by Paddle), transaction amounts. | United Kingdom / European Union. | Active |
| QRolling — in-house mail infrastructure (outbound SMTP via JavaMailSender) | Transactional email (account verification, password reset, billing notifications). | Name, email address, message content. | Georgia / European Union. | Active |
| Grafana Labs | Infrastructure monitoring, error and performance dashboards. | System logs, performance metrics, error traces (may contain truncated identifiers). | European Union. | Active |
| Google LLC — Cloud Translation API | On-the-fly translation of UI strings and QR-type metadata into the user’s language. | Text strings to translate (may include user-entered labels). | United States. | Active |
| Google LLC — OAuth (“Sign in with Google”) | User authentication for accounts that choose Google sign-in. | Google account identifier, name, email, profile picture (as authorised by the user). | United States. | Active |
| Apple Inc. — Sign in with Apple | User authentication for accounts that choose Apple sign-in. | Apple-issued identifier, name, relay or real email (as authorised by the user). | United States. | Active |
The following sub-processors are engaged only when a customer activates a specific feature or extension. They do not process data for customers who do not use the corresponding feature.
| Provider | Function | Categories of data | Hosting region | Status |
|---|---|---|---|---|
| Replicate, Inc. | Generative-AI inference for the AI Templates Extension. | User-provided prompts, reference images, generated outputs. | United States. | On extension activation |
| Google LLC — Google Analytics 4 (planned) | Aggregated usage analytics on the public marketing site (qrolling.com). Will be loaded only after explicit cookie consent. | Truncated IP address, device and browser data, page views, referrer. | United States. | Not yet active |
| Print fulfillment partner for the Print Studio Extension | Production and shipment of printed materials. | Order details, shipping address, design files. | To be announced. | Not yet active |
Where personal data is transferred from the European Economic Area, the United Kingdom, or Switzerland to countries that have not received an adequacy decision, transfers are protected by appropriate safeguards, including:
Transfers to providers based in Georgia are covered by Georgian data protection law and additional contractual protections aligned with the GDPR.
For business and enterprise customers under a Data Processing Agreement (DPA):
QRolling
Registered address: 75A Erosi Manjgaladze Street, Tbilisi 0159, Georgia
Company registration: B26345195 (National Agency of Public Registry, Georgia)
Tax ID: EN3289008
Privacy & data protection: [email protected]
General & billing: [email protected]
Website: qrolling.com