Nap OS · Napblog Limited
Last updated: 1 September 2026
We share personal data only with service providers who process it on our documented instructions, each under a written data processing agreement requiring appropriate security. This page lists every one of them. We update it before adding a new provider, and we notify members and institutional customers when we do.
This page supports our Privacy Policy.
Platform infrastructure
All personal data processed through the Nap OS platform — account data, project submissions, assessment records and verification records — is stored within the European Economic Area.
| Provider | Purpose | Established | Data location |
|---|---|---|---|
| Hostinger International Ltd | Application and website hosting | Lithuania (EEA) | EU |
| Google Ireland Limited (Google Workspace) | Records, document storage, backups, correspondence | Ireland (EEA) | EU |
| Stripe Payments Europe Limited | Subscription billing and payment processing | Ireland (EEA) | Ireland |
We do not store card numbers. Payment card details are handled entirely by Stripe.
Business operations
| Provider | Purpose | Established | Transfer basis |
|---|---|---|---|
| HubSpot | Customer relationship management, forms and email | United States | Standard Contractual Clauses / EU–US Data Privacy Framework |
Artificial intelligence
| Provider | Purpose | Established | Transfer basis |
|---|---|---|---|
| [PROVIDER NAME] | Drafting project briefs and assessment rubrics from employer role descriptions | [COUNTRY] | [BASIS] |
Our agreement with this provider prohibits the use of any content we send from being used to train their models. No personal data of members is sent to this provider — only employer role descriptions, which the employer then edits and approves.
What we do not do
We do not sell personal data. We do not share it with advertising networks or data brokers. We do not use member data, or the work members produce, to train public foundational AI models.
International transfers
Where a provider is established outside the European Economic Area, that transfer is governed by European Commission Standard Contractual Clauses (Implementing Decision (EU) 2021/914), supported by a transfer impact assessment and by technical measures including encryption in transit and at rest. Where no lawful transfer mechanism can be established for a provider, we do not use that provider.
Questions
Email palani@napblog.com.
Napblog Limited · CRO 812006 · 77 Camden Street Lower, Saint Kevin’s, Dublin, D02 XE80, Ireland