These service providers process personal data on our behalf when we provide the currencyapi API and the dashboard at app.currencyapi.com. Last updated: 28 October 2026.
| Provider | What it does for us | Personal data it may receive | Location |
|---|---|---|---|
| Hetzner Online GmbH | Servers for the API, the dashboard, our databases and our logs | All data described in our privacy policy, including what you send to the API | Germany |
| Cloudflare, Inc. | DNS, network proxy, encryption (TLS) and firewall for the API and the dashboard; hosting of this website and the free tools; bot protection (Turnstile); file storage (R2); delivery of contact form messages | Every request while it passes through, including what you send to the API; files stored for you; free tool lookups (cached for up to 7 days); contact form messages | United States, global network |
| Functional Software, Inc. (Sentry) | Error tracking for the API and the dashboard | Details of requests that caused an error | United States |
| PostHog, Inc. | Analytics for this website and the dashboard; recordings of dashboard sessions | Usage data and page addresses; in the dashboard, events linked to your account | EU (Germany) |
| Stripe | Payments and invoices | Billing details; card data goes to Stripe directly and never reaches our servers | Ireland, United States |
| Postmark (ActiveCampaign, LLC) | Sending account emails | Your email address and the content of the email | United States |
| Google (Google Workspace) | Our email, including support requests and contact form messages | Your messages and contact details | Ireland, United States |
| Anthropic, PBC | AI-assisted drafting of replies to support requests | Your message, its attachments and the account details needed to answer; not used to train models | United States |
| Slack (Salesforce, Inc.) | Internal notifications to our team | Account name, email address and summaries of support requests | United States |
| Backblaze, Inc. | Backups of our main database, encrypted on our servers before upload, kept for 14 days | Encrypted copies of our main database, including account data; Backblaze cannot read them | Netherlands (Amsterdam) |
We tell the account owner by email at least 30 days before a new sub-processor starts to process personal data. If you object for a reason related to data protection, you can end the affected service before the change; we refund fees you paid in advance for the time after it.
Download this list as CSV. Providers that only serve this website, such as font hosting, and the sign-in providers you can choose are named in our privacy policy.
See also our Trust Center and Hosting.