Overview
NMAJOR STUDIOS LLC, a Wyoming limited liability company, doing business as Desktop Accounting API, uses the providers below to run the Services. Each one receives only the data its task requires. This page is the subprocessor list referred to in our Data Processing Agreement.
Subprocessors
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Cloudflare, Inc. | Hosting for the website, documentation, dashboard, API, Web Connector endpoint and setup flow (Workers); database (D1 and Durable Objects); file storage (R2); queues; logs; DNS, TLS and network security; DNS lookups that check webhook destinations | All Customer Data, including QuickBooks request and response data and End User details; account data; IP addresses and request metadata | United States company. Global network: requests are handled in the data center nearest the sender. Main relational database placed in Western Europe; other storage is placed by Cloudflare and may be outside the EEA |
| AhaSend (TakTek GmbH) | Transactional email: email verification, password resets, team invitations and trial notices | Recipient name and email address, and message content | European Union / EEA |
| MXroute LLC | Hosting of our support and privacy mailboxes, used to answer contact-form and privacy requests by email | Name, email address and message content of people who write to us | United States |
Services we operate ourselves
These tools are open-source software that we run on servers we administer. No software vendor operates them or receives the data in them.
| Service | Purpose | Data processed |
|---|---|---|
| Chatwoot | Live chat and our support inbox; contact-form and privacy-request messages are stored as conversations | Name, email address, messages and attachments from people who contact us |
| Rybbit | Cookieless website analytics on marketing pages | Pages viewed, referrer, browser and device type, and approximate location. No identifier is stored in the browser, and raw IP addresses are not stored |
Merchant of record
Polar Software, Inc. (United States) sells our paid subscriptions as merchant of record and reseller. Polar collects payment details, billing addresses and tax information directly from you as an independent controller under its own privacy policy. We send Polar your organization's identifier, the billing owner's email address and daily usage events, each containing an organization identifier, a one-way fingerprint of the company file and the date. Usage events contain no accounting records.
Not subprocessors
- Intuit. QuickBooks and the QuickBooks Web Connector run on your End Users' computers under their own Intuit licenses. We do not send data to Intuit.
- GitHub and package registries (npm, PyPI, NuGet and Maven Central) host our source code and SDK releases. They receive no Customer Data.
- Healthchecks, which we run ourselves, receives only pass or fail signals from our scheduled jobs. It receives no personal data.
Changes and objections
We update this page, including its "Last updated" date, at least 30 days before a new subprocessor starts processing Customer Data. In an emergency that threatens the security or availability of the Services, we may make a change sooner and update this page as soon as we can. Customers may object to a new subprocessor on reasonable data-protection grounds through our contact page within that notice period, as described in section 7 of the DPA.