Subprocessors and data location
Current as of: September 23, 2026 · Version 1.0
This is an English translation provided for convenience. The Polish version (Podprocesorzy i lokalizacja danych) is the legally binding one; in case of any discrepancy, the Polish version prevails.
Below is the current list of processors (subprocessors) used by the operator — ELEVATION SYSTEMS — Emanuel Trzcionkowski — in providing the WorshipPro service. The list forms part of the Data Processing Agreement (DPA) and the Privacy Policy.
Notification of changes: we notify the owners and administrators of churches by email of any addition or replacement of a subprocessor at least 30 days in advance. A church may raise a reasoned objection within 14 days (§ 6.3 DPA).
Service infrastructure
| Category | Provider | Purpose | Location | Transfer basis |
|---|---|---|---|---|
| Server (VPS) | ULTIMAHOST.PL Szeliga sp. j. | Application server, PostgreSQL database and files (media, attachments, sheet music scans) | Poland | EU — no transfer |
| Email delivery | Resend | Messages sent by the service: address confirmation, password change, invitations, ministry reminders | EU (Ireland); US company | SCC |
| Backups | Cloudflare, Inc. (R2) | Storing the daily backup of the database and files off the server; the backup is encrypted before upload and only the Operator holds the key | EU (EU jurisdiction); US company | SCC, EU-US DPF |
Correspondence with us
This applies only to messages you send to contact@worshippro.net — not to data from the app.
| Category | Provider | Purpose | Location | Transfer basis |
|---|---|---|---|---|
| Email forwarding | ImprovMX | Forwarding messages from addresses in the worshippro.pl domain to the operator's mailbox | USA | SCC |
| DNS and email forwarding | Cloudflare, Inc. | Name servers for the worshippro.net domain; forwarding messages from addresses in that domain to the operator's mailbox | USA (global network) | SCC, EU-US DPF |
| Mailbox | Google (Gmail) | Receiving and handling correspondence with users | EU / USA | SCC, EU-US DPF |
Sign in with Apple and Google (your choice)
Apple and Google are not subprocessors: when you choose "Sign in with Apple" or "Sign in with Google", they act as independent controllers under their own privacy policies. They pass us only your account identifier, email address and name (with Google, also the address of your profile picture).
| Service | Provider | Location |
|---|---|---|
| Sign in with Apple | Apple Distribution International Ltd. / Apple Inc. | Ireland / USA |
| Sign in with Google | Google Ireland Limited / Google LLC | Ireland / USA |
What we do not use
WorshipPro does not use ad networks, analytics tools, artificial intelligence services, third-party error monitoring, push notifications or payment providers. The service is not behind any third-party CDN or proxy — traffic goes directly to the server in Poland.
What the labels mean
- EU — no transfer — data processed exclusively within the European Union,
- SCC — transfer outside the EEA based on the European Commission's Standard Contractual Clauses (Implementing Decision 2021/914),
- EU-US DPF — provider certified under the EU-US Data Privacy Framework (Commission Decision 2023/1795).
Questions and objections
Send questions about subprocessors and objections (§ 6.3 DPA) to contact@worshippro.net.