Third Party Services

darren-glanville.dev operates OpenCommute and relies on a small number of trusted third-party providers to host the platform and process payments. This page explains what data may be shared with those providers and why.

Laravel Cloud

Laravel Cloud provides the cloud infrastructure which hosts the OpenCommute platform, holds production files and data, and serves this content to end users through our domain names.

Laravel Cloud provides application hosting, security and networking services for web traffic transmitted to and from OpenCommute. It allows us to efficiently manage web traffic and help secure the application from malicious activity. Web traffic transmitted to and from OpenCommute passes through Laravel Cloud's systems as part of normal platform operation.

Laravel Cloud also enables us to maintain backups of files and data used to run the OpenCommute platform, which helps us provide a reliable and uninterrupted service.

Our relationship with Laravel Cloud is governed by their standard terms of service and privacy policies. We choose providers that maintain appropriate security standards and data protection commitments.

Stripe

We process subscription payments using Stripe Payments Europe, Limited, a worldwide payments provider. Payment details are collected securely and passed directly to Stripe. We do not store card details on our systems.

Stripe may process payment data in accordance with its own privacy policy and applicable data transfer mechanisms. For customers in the European Economic Area, Stripe's European entity handles payment processing and may use appropriate contractual safeguards where data is transferred internationally.

You can read more about how Stripe handles personal data in the Stripe Privacy Policy.

Google Analytics

On the public marketing website and signup flows, we use Google Analytics 4 to understand how visitors use those pages and which calls to action lead to a trial. The Google tag (measurement ID G-XVFYGCLVR7) loads only if you accept analytics cookies in our cookie banner. It is not installed on the signed-in OpenCommute platform.

Google may process information such as your IP address, browser type, pages viewed, and events such as button clicks. We ask Google to anonymise IP addresses. You can reject analytics cookies and still use the marketing site.

You can read more in the Google Privacy Policy.

tawk.to

On the public marketing website, we offer optional live chat through tawk.to so prospective customers can ask questions before starting a trial. The chat widget loads only if you accept functionality cookies in our cookie banner. Desktop and mobile use the same tawk.to property and widget — we do not load a different chat embed by screen size.

When you use live chat, tawk.to may process information such as your IP address, browser type, pages viewed, and the content of your messages. tawk.to acts as a processor on our behalf for chat conversations initiated from the marketing site.

You can read more in the tawk.to Privacy Policy.

GoCardless

Teams can collect invoice payments by Direct Debit through GoCardless. When a team connects GoCardless, members who pay an invoice that way are sent to GoCardless to set up or use a mandate. OpenCommute does not collect bank passwords, and GoCardless is not used for OpenCommute account sign-in.

GoCardless may process payment and mandate data in accordance with its own privacy policy. You can read more in the GoCardless Privacy Policy.

UptimeRobot

We publish a public status page hosted by UptimeRobot so visitors can check whether OpenCommute is available. The marketing site, including signup, links to stats.uptimerobot.com. That page is opened in a new tab. We do not embed the status page inside signup or login forms.

UptimeRobot may process information such as your IP address and browser type when you open the status page. You can read more in the UptimeRobot Privacy Policy.

Cloudflare Turnstile

We use Cloudflare Turnstile to protect public forms from automated abuse. This includes organisation signup, joining a team, signing in, and resetting a password. Turnstile checks that a real person is submitting the form and does not require you to solve puzzles in most cases.

Cloudflare may receive your IP address, browser type, and a one-time token from the form so it can complete that check. We treat this as a security measure. Turnstile is not used for advertising.

You can read more in the Cloudflare Privacy Policy.

Questions

If you have questions about how darren-glanville.dev uses third-party services, please contact us at privacy@opencommute.uk or read our Privacy Policy.