Service Provider and Subprocessor Register

About This Register

ROVYN uses the providers below to operate, secure, support, and integrate TaskForceOne. A provider acts as a subprocessor where it processes Customer Personal Information within the scope of our Data Processing Addendum; it may instead support ROVYN's own activities for other processing. The listed categories describe information a provider may process for that function. Actual processing depends on service configuration and whether the relevant feature or integration is enabled.

Core Service Providers

• DigitalOcean — managed cloud database and related infrastructure; may process account, organisation, workforce, audit, and application data.
• Cloudflare — R2 object storage and content delivery; may process uploaded documents, images, videos, message attachments, technical logs, and network information.
• Resend — service email and separately consented marketing email delivery; may process recipient names and email addresses, message content, provider and delivery identifiers, unsubscribe headers, delivery, bounce, complaint and suppression events, and technical metadata. It may act within Customer-directed service processing or support ROVYN's own direct-marketing activity, depending on the message.
• Stripe — subscriptions, invoices, payment processing, tax and fraud workflows; may process customer contact, billing, payment-token, transaction, and device information. ROVYN does not store complete payment-card numbers.
• Google Firebase — mobile and web push notifications; may process device tokens, notification payloads, application identifiers, and delivery metadata.
• Google reCAPTCHA — abuse and spam prevention on public website forms; may process IP address, browser and device information, interaction signals, and the page or action being protected.
• Sentry — error monitoring, diagnostics, and performance troubleshooting; may process IP address, device and browser details, error context, identifiers, and limited application data present in a diagnostic event.
• Mapbox — maps, address lookup, and location interfaces; may process map requests, IP address, device information, and location or address queries when those features are used.
• Discord — routing of website contact, support, or industry-partner enquiries to the TaskForceOne team; may process the contact details and message a person submits through those forms.

Customer-Selected Integrations

• Xero — payroll integration; may receive or return employee identifiers, pay items, settings, timesheets, leave information, export results, and related payroll data when connected by a Customer.

Processing Locations

Our cloud, email, monitoring, mapping, payment, mobile, and integration providers may process or support data from Australia, the United States, or other countries in which they or their own providers operate. We do not describe all Customer Data as exclusively stored or processed in Australia.

Changes and Objections

We may update this register as the service changes. Where a new provider will materially change how Customer Personal Information is processed, we will give affected Customers reasonable advance notice when practicable or required by contract or law. A Customer with a reasonable data-protection objection should contact us promptly so we can discuss available safeguards or alternatives.

Contact

Questions about a provider, processing location, or data category can be sent to [email protected].