Lanka subprocessors
The services that process personal data on Lanka's behalf: the data of bot owners and of their bots' visitors. Last updated on 2 November 2026. Questions go to support@lanka.bot.
Lanka's subprocessors
| Who | What it processes | Where | What for |
|---|---|---|---|
| Hetzner Online GmbH | All of the service's data: the database, the job queues, the server logs | Helsinki, Finland (EU) | The server Lanka runs on |
| Cloudflare, Inc. | Bots' media, encrypted database backups, mail to @lanka.bot addresses | Global network, under Cloudflare's policy | R2 storage, DNS and mail forwarding |
| Functional Software, Inc. (Sentry) | Server and browser error reports. No IP addresses, cookies or request bodies are sent there | Germany (EU) | Finding and fixing failures |
| Google LLC | Visits to the site and the owner's app, only with consent in the cookie banner. Bot visitors' data does not reach it | USA, a participant in the EU-U.S. Data Privacy Framework, under Google's policy | Google Analytics |
Telegram
The bots' messages and the sign-in to Lanka go through Telegram. A bot belongs to its owner and exists in Telegram independently of Lanka, so Telegram processes this data as a separate controller under its own policy, not on Lanka's behalf.
What the bot's owner connects
The bot's owner chooses and connects these services. Lanka passes data to them only as the bot's settings say. They are the owner's subprocessors, not Lanka's, and the owner makes the agreement with them.
- The AI step sends a question to Anthropic (Claude), OpenAI (ChatGPT) or Google (Gemini) with the owner's API key from the bot's secrets. The provider receives the step's question and instructions with the values of the variables the owner put in them as tokens, a visitor's data included. The provider processes them under the terms the owner accepted when getting the key.
-
Scripts and
fetchrequests send data to the services the owner named in the script. - Payments in the bot go through Telegram and the payment provider the owner connected.
- An AI chat the owner connected to Lanka over MCP receives what its tools return. They do not return visitors' messages or personal details (Privacy policy, section 5).
Changes
We announce a new Lanka subprocessor at least 30 days ahead, in Lanka or through Telegram.