These are the companies that process personal data for Tyma, what each one does, and where. Each is bound by a written contract that protects the data at least as well as our [Data Processing Agreement](/dpa) does.
We give organizations at least 30 days' notice before adding or replacing one, as the DPA sets out. To be told by email, you only need to own an organization in Tyma.
1. Hosting and storage
Vercel Inc.
What it does: runs the Tyma application.
Data: everything the app handles while serving a request.
Where: European Union (Dublin, Ireland), served through Vercel's worldwide network. Vercel is a US company.
Transfer safeguard: EU–US Data Privacy Framework and Standard Contractual Clauses.
Supabase Inc.
What it does: hosts the Tyma database and its backups.
Data: all stored account, calendar, task and organization data.
Where: European Union (Ireland). Supabase is a US company.
Transfer safeguard: Standard Contractual Clauses.
2. Features
Google LLC
What it does: Sign in with Google, reading the calendars you connect, keeping the Tyma calendar in your Google account if you turn it on, and the Gemini API behind Tyma's AI features.
Data: your Google identity, the calendars you choose, and the text an AI feature needs for the request you made. Google does not use Gemini API requests from paid services to train its models.
Where: United States and worldwide.
Transfer safeguard: EU–US Data Privacy Framework and Standard Contractual Clauses.
Resend Inc.
What it does: sends Tyma's email: verification codes, invitations, reminders and summaries.
Data: your email address and the content of the email.
Where: United States.
Transfer safeguard: Standard Contractual Clauses.
Cloudinary Ltd.
What it does: stores and serves profile and organization pictures.
Data: the picture you upload.
Where: United States.
Transfer safeguard: Standard Contractual Clauses.
3. Delivery services your device chooses
Web push services run by your browser's maker (Google, Mozilla or Apple) deliver push notifications to your device. They see that a message is going to your device. The content is encrypted end to end, so they cannot read what Tyma is telling you.
4. Services you connect yourself
These process data only because you connect them, and under their own terms. They are not our sub-processors, but they are listed so the picture is complete.
- Trello (Atlassian): reads the cards assigned to you, if you connect a board.
- Calendar apps you subscribe with your private link: fetch your Tyma meetings and tasks under their own privacy policies.
5. Contact
Questions about this list go to kaydeedevelopers@gmail.com.