Subprocessors
These are the third parties that process data on our behalf when you use bklink. The list is exhaustive for services that touch customer data. We keep it current because a subprocessor list that quietly goes stale is worse than none — it is a statement people rely on when deciding whether to sign up.
Current subprocessors
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Cloudflare, Inc. | Application hosting, CDN, DNS, outbound email, backup storage (R2) | All request traffic, account email for transactional mail, encrypted database backups | Global edge network; backups in Cloudflare R2 |
| Neon, Inc. | Managed PostgreSQL — the primary database | Account records, projects, campaigns, backlink data you submit, wallet ledger | United States |
| Stripe, Inc. | Payment processing for wallet top-ups | Billing name, email, payment method, transaction records | United States and global |
| Functional Software, Inc. (Sentry) | Error monitoring | Error events, request paths and pseudonymous account identifiers. Email addresses, credentials and share tokens are stripped before transmission | European Union (Frankfurt region) |
| DataForSEO LLC | Backlink and domain metric lookups | Domains and URLs you submit for audit. No account or personal data | United States and European Union |
| Ahrefs Pte. Ltd. | Domain Rating lookups | Domains you submit for audit. No account or personal data | Singapore |
| NicheObserver | Publication reach and audience estimates | Domains you submit for audit. No account or personal data | United States |
| DataFast | Privacy-focused, cookieless product analytics | Page paths, referrer and coarse device information. Report and password-reset URLs are excluded | European Union |
| Mixpanel, Inc. | Product analytics — how the app itself is used | Pseudonymous account identifier and bucketed product events (audit started, completed, blocked). No email address, no submitted URLs or domains, no report contents, no payment amounts | United States |
| GitHub, Inc. (Microsoft) | Source control and the scheduled database backup job | Encrypted database backups in transit during the backup run | United States |
What is deliberately not on this list
Websites we fetch on your instruction are not subprocessors. When you submit a URL for audit, we request that page the way any browser would. The site's operator receives our request and their own logs record it, but they are not processing data for us and we have no agreement with them. This is also why you must only submit URLs you have a legitimate interest in auditing.
Changes
We will update this page before a new subprocessor starts handling customer data, and the date at the top of the page changes with it. If you have a written agreement with us that requires advance notice of subprocessor changes, that agreement governs and we will notify you as it requires.
To be told when this page changes, email support@bklink.uk.
Objecting to a subprocessor
If you have a reasonable, documented objection to a new subprocessor on data-protection grounds, tell us. We will try to offer a workaround. Where we cannot, you may stop using the affected functionality and request a refund of your unspent balance under the Refund Policy. We are a small operation and cannot promise to remove a provider the service depends on.
bklink is operated by Immortal Reality PA LLC, 6375 Penn Ave Ste B, Pittsburgh, Pennsylvania 15206, United States. Questions about this page: support@bklink.uk.