Sub-processors

Last changed September 27, 2026 · Version 2.0 · Reference page. The Privacy Policy and, for business customers, the Data Processing Agreement control.

This page lists the companies that process personal information for Aerodyne Inc. to run Terrestream ("sub-processors"). It also lists two other groups: payment partners you choose at checkout, and advertising partners that receive information only if you opt in. The Privacy Policy and the Data Processing Agreement (DPA §7 and Annex C) refer to this page.

1. How to read this list

• The DPA describes the obligations that apply when we appoint a sub-processor to handle Customer Personal Data. A provider may have a different role for its own account, payment, security or legal processing.
• The Privacy Policy and DPA explain international processing and transfer safeguards. This list describes provider functions; it is not a guarantee that every copy or support operation stays in one country.
• Payment partners (section 4.2) and advertising partners (section 8.2) aren't our sub-processors. They use information under their own terms and privacy policies.

2. Infrastructure

Provider	What they do for us	Personal information involved
Vultr	Servers, databases and backups for the website, the API, the web dashboard and Facilities	Everything we store
Cloudflare	Domain name service, content delivery, firewall, encrypted connections (TLS), bot checks on forms (Turnstile), and visitor country and approximate-location headers used for currency and local conditions on terrestream.com	IP address, request details, device and browser information

3. Communications

Provider	What they do for us	Personal information involved
Mailgun	Sends account, order, shipping, notification and Facilities alert emails from mg.terrestream.com	Email address, name where you gave one, and the message
Proton	Receives email sent to our @terrestream.com addresses, including copies of order details that our systems send to our own support mailbox	Your email address and your message; for orders, your name, shipping address and order details
Twilio	Configured provider for Facilities text messages if that channel is activated; SMS delivery is currently disabled	Mobile number and message content (verification codes, building and room alerts)
Apple Push Notification service	Delivers notifications and Live Activity updates to iPhone (and Apple Watch, through iPhone)	Device push token and the notification content, which can include room names, status, alert text and some readings
Firebase Cloud Messaging (Google)	Delivers notifications to Android	Device push token and the notification content, which can include room names, status, alert text and some readings

Twilio can also place voice calls, but we don't use that feature.

4. Payments, orders and shipping

4.1 Processors

Provider	What they do for us	Personal information involved
Stripe	Checkout and card payments in the web shop, sales tax calculation, fraud checks, and shipping and tracking details for orders.	Name, email, billing and shipping address, order details. Stripe holds card details; we don't.
EasyPost	Buys shipping labels and passes them to FedEx	Name and shipping address on the order, and the order reference

FedEx delivers orders under its own terms. The phone number on the shipping label is ours; checkout doesn't ask for yours.

4.2 Payment partners you choose

Checkout shows the payment methods available for your order, which may include wallets or payment partners such as Apple Pay, Google Pay, Klarna, Affirm, Afterpay or Cash App Pay. If you choose one, that company handles the payment under its own terms and privacy policy and receives what it needs to do so, such as your name, contact details and the order amount. Buy-now-pay-later providers may also check whether you're eligible. Refunds go back through the same partner (Terms §8.5).

4.3 Marketplace purchases

If you buy through a third-party marketplace, that marketplace handles the order and payment under its own terms. This does not mean that a Terrestream listing is currently available on any particular marketplace.

5. App platforms and sign-in

Provider	What they do for us	Personal information involved
Apple	Distributes the iPhone app through the App Store; Sign in with Apple; App Attest and DeviceCheck, which confirm that requests come from our genuine app; the Apple Maps base map in the iPhone app	If you use Sign in with Apple: your Apple account identifier and email (or a relay email). App attestation data. The map area you view.
Google	Google Sign-In; Firebase App Check (using Play Integrity on Android) and Firebase Installations, which confirm that requests come from our genuine app	If you use Google Sign-In: your Google account identifier and email. App instance identifier and attestation data.

The Android app is downloaded from terrestream.com, not Google Play.

6. Outdoor data

These providers supply the outdoor air quality, pollen and weather for your home's area. We never send them your address. We send the centre of a map grid square around your home, between about 11 km and 55 km across depending on the data. The local conditions shown on terrestream.com use the same grid squares, based on the visitor's approximate location.

Provider	What they do for us	Personal information involved
Google Maps Platform	Outdoor air quality (Air Quality API) and pollen (Pollen API)	Grid-square location (about 11 km for air quality, 25 km for pollen)
Open-Meteo	Weather, forecasts, outdoor air quality and climate data	Grid-square location (about 55 km)
U.S. National Weather Service	Official weather alerts for U.S. homes	Grid-square location (about 55 km)
DB-IP	An IP-to-location database that runs on our own servers. We use it to suggest an approximate home location, to set a home's time zone, and for the website visitor log that the Privacy Policy describes.	None. Nothing is sent to DB-IP.

We also download public data without sending any personal information: NOAA satellite smoke analysis, NASA fire detections, public news feeds (NASA and The Public's Radio), GeoNames place names, and OpenStreetMap and Natural Earth map data, which we serve from our own servers.

7. Language models

Provider	What they do for us	Personal information involved
Anthropic	Writes answers to questions typed into the help search at terrestream.com/support, using our help content	The text you type, including any personal information you put in it. We do not attach account, sensor or home-location data.

See Language Model Disclosures.

8. Website analytics and advertising partners (only if you opt in)

On terrestream.com, the tools in this section run only if you opt in through "Your Privacy Choices". You can change your choice at any time with the "Your Privacy Choices" link at the bottom of every page, and we honor Global Privacy Control signals. Our server-side measurement payloads use the event and identifier fields described below, not full card details. Do not put personal information into URLs or free-text fields. When their code runs in your browser, your browser also sends them your IP address and browser information.

8.1 Website analytics

Provider	What they do for us	Personal information involved
Google Analytics (Google)	Site analytics, including a report from our server of purchases made during visits you opted in	Pages viewed, device and browser information, campaign details, analytics cookie identifiers, and purchase amount and order reference

Our other site analytics tool, Matomo, runs on our own servers. The Privacy Policy describes it.

8.2 Advertising partners

These companies aren't our sub-processors. They use what they receive under their own terms and privacy policies. Under applicable U.S. state laws, disclosures for advertising can constitute a sale or sharing of personal information. See the Privacy Policy and Your Privacy Choices.

Partner	What it's used for	Information involved
Meta	Advertising measurement: the Meta Pixel in your browser, and a report from our server of purchases you made after opting in (Conversions API)	Page visits, product views, cart activity, purchase amounts and browser advertising identifiers
Reddit	Advertising measurement: the Reddit Pixel in your browser, and a report from our server of purchases you made after opting in (Conversions API)	Page visits, product views, cart activity, purchase amounts and the Reddit click identifier
Pinterest	Advertising measurement: the Pinterest tag in your browser	Page visits, cart additions, purchase amounts and browser information

9. Services you connect yourself

When you connect Terrestream to something yourself, such as your own MQTT broker, Home Assistant, a webhook address or an app that uses one of your API tokens, the information goes where you send it. Those services aren't our sub-processors, and their own terms apply.

10. How we tell you about changes

We update this page, and its "Last changed" date, when we add, replace or remove a provider.

For business customers with a Data Processing Agreement: we give at least 30 days' notice before adding or replacing a sub-processor that processes Customer Personal Data, by updating this page and, where the change is material to your deployment, by emailing your account administrator. You may object on reasonable data-protection grounds within 15 days of the notice, as DPA §7.2 and §7.3 describe.

If a change affects how we use your personal information in a material way, we also tell you as the Privacy Policy describes.

To ask about a provider, or for this list's change history, contact us.

11. Change history

• September 27, 2026 · List update. Added Vultr, Cloudflare, Proton, EasyPost, Twilio, Firebase App Check and Installations, Sign in with Apple, Google Sign-In and the National Weather Service. Removed Amazon Web Services, Google Gemini, Google Photorealistic 3D Tiles and in-app subscription billing through the App Store and Google Play. Corrected the descriptions of Mailgun, Stripe, Apple Push Notification service, Firebase Cloud Messaging, Google Analytics, DB-IP, Anthropic; omitted model-written climate-news summaries from the active list. Listed payment partners and advertising partners separately.
• September 27, 2026 · 2.0. New page text with the groups above.
• June 1, 2026 · 1.0. Initial publication.