Skip to content

For Customers

Subprocessors

The service providers who process data on our behalf to run the service.

As of last update on July 28, 2026, at Longtime Friends, LLC, we keep the number of outside services to a minimum. This page lists our subprocessors — the service providers who may process your information on our behalf, solely to operate Longtime. Each is bound by written data protection terms, with one exception we describe below. We never sell your information, and we never share it with anyone for their own purposes.

Our Subprocessors

  • Laravel Cloud (hosting, database, and file storage). Runs Longtime and holds everything in your Space, including files such as imports and exports. United States. Laravel Cloud relies on its own providers to do this — including Amazon Web Services for infrastructure and Cloudflare for network routing, which is global by design. It engages them under its own agreements rather than ours, and publishes the full list at trust.laravel.com.
  • Amazon Web Services — Bedrock (AI-assisted data entry and search). Processes the text you type into the interview or search. United States. See our AI notice.
  • Amazon Web Services — Location (address lookup / geocoding). Processes addresses you enter. United States, though Amazon may pass a lookup to a third-party mapping provider that processes it outside the United States.
  • Amazon Web Services — S3 (off-site backup storage). Holds an encrypted copy of the database, so that a problem at our hosting provider cannot put your information out of reach. The copy is encrypted before it leaves Longtime, with a key Amazon does not hold, and it is deleted automatically after thirty days. United States.
  • Stripe (payments and subscriptions). Processes your name, email address, billing address, and payment method. United States.
  • Forward Email (transactional email such as sign-in and account notices). Processes your name and email address. United States.
  • Pusher (real-time updates within the app). Processes Space event data, which may include names. United States.
  • Gravatar (Automattic) (profile-photo lookup). We check whether a public profile photo exists for a contact by sending a hashed version of their email address. If one does, your browser loads that image directly from Gravatar, so Gravatar receives your IP address at that moment. United States. Gravatar is a public service that anyone can query without an account, not a provider we contract with — see the note below.
  • Sentry (error monitoring). Diagnostic data only; we scrub personal information before it is sent. United States.
  • Grafana (application logging). Diagnostic logs only; we scrub personal information before it is sent. United States.

A Note on Gravatar

Every other service on this page processes information on our behalf under written data protection terms. Gravatar is the exception. Profile photos are served from a public address that anyone can request without an account or a key, so there is no customer relationship to contract through and no data processing agreement available to enter into. We would rather tell you that than let the list imply otherwise.

Changes to This List

We keep this page current as our subprocessors change. If a change materially affects how your information is processed, we will note it here and update the “Last Updated” date above.

Contact Us

If you have any questions about our subprocessors, please feel free to contact us at support@longtime.app.