Subprocessors

This English version is a translation provided for your convenience. In case of any discrepancy between the Dutch and English text, the Dutch Subverwerkers prevails.

This page lists the third parties we engage to process personal data for the TimeToBill service. Each party on this list is a subprocessor within the meaning of article 28 GDPR. Any party not listed below does not process personal data on our behalf.

This page forms one whole together with the Data Processing Agreement and the Privacy Statement. Changes to the table are announced according to the procedure at the bottom of this page.

Who is the controller?

STB Services (operating under the name TimeToBill) is the controller for data about its own customers (account, company and billing data). We engage the subprocessors listed below for those processing activities.

For the narrow set of data you send us in a support or complaint request, and for WeFact API traffic that passes through our optional IP-relay proxy, we act as processor on your behalf. In those cases too, only the parties listed below are involved. The precise scope of that processor role is set out in the Data Processing Agreement.

Which subprocessors do we use?

Service	Provider	Role	Country	Transfer outside the EEA?	Purpose
Payment processing	Mollie B.V.	Processor	Netherlands	No	Subscription collection, mandate management (SEPA mandates are held by Mollie, not by us), refund handling
VPS hosting	Hetzner Online GmbH	Processor	Germany	No	Operating all application and supporting servers of TimeToBill
Invoicing to customer	WeFact B.V.	Processor	Netherlands	No	Drafting and sending the invoices we send to you as our customer
Transactional email and DNS	mijn.host B.V.	Processor	Netherlands	No	Delivery of account, invoice, reminder and support email; DNS for timetobill.nl
Off-site backups	pCloud AG	Processor	Switzerland	Yes — to Switzerland under the European Commission adequacy decision (art. 45 GDPR)	Encrypted off-site backups for disaster recovery

Not on this list, and why not

External integrations you use with your own API key (Clockify, Toggl Track, WeFact for your own bookkeeping) are not TimeToBill subprocessors. The desktop application on your computer talks to those services directly using your own credentials. That data does not pass through our servers. You are the controller for those integrations and conclude any necessary agreements with Clockify, Toggl and/or WeFact yourself. The only exception is the optional IP-relay proxy for WeFact: if you enable it, WeFact API traffic passes through our VPS in transit. Payloads are not stored; the Data Processing Agreement describes that scope precisely.

Self-hosted components for identity, licence validation, edge protection, logging and website analytics run exclusively on our own Hetzner infrastructure, operated by STB Services itself. For website analytics we use Plausible Community Edition on this STB-operated VPS infrastructure. We do not use the hosted Plausible Analytics SaaS service; Plausible Insights OÜ does not receive the analytics data and is therefore not a separate external subprocessor. Because the other components do not leave our environment, we do not name them individually as subprocessors and we do not publish their names or versions. That is a deliberate security choice. Customers or prospects who, for a security assessment or under non-disclosure, wish to know the specific components can request them at hello@timetobill.nl.

External analytics or marketing services are absent from this list. The self-hosted analytics uses no analytics, advertising or tracking cookies. See the Cookie Statement and Privacy Statement.

How do we announce changes?

1. At least 30 days in advance. Any addition, replacement or material change of a subprocessor is published on this page at least 30 calendar days before the change takes effect.
2. Active customers receive an email. The same notice is emailed to each active customer's primary account address.
3. You have the right to object. Within those 30 days you may submit a motivated objection by email to hello@timetobill.nl. If we cannot resolve the objection together, you may terminate the agreement in mutual agreement without any fee for the remaining term.
4. The change only takes effect after the notice period. Before the effective date the previous table remains in force. The new table receives a new version number and is recorded in the changelog below.
5. In case of an acute security or continuity necessity (for example, failure of an existing subprocessor) we may switch faster. In that case we announce the change immediately, explain the accelerated path, and your right to object remains substantively unchanged.

Changelog

Version	Effective from	Change
2.0.0	2026-09-04	Clarified that Plausible Community Edition is self-hosted on STB-operated VPS infrastructure and is not an external Plausible SaaS subprocessor.
1.0.0	2026-04-28	First published version.

Older versions remain permanently retrievable at /legal/subprocessors/<version>.

Contact

Questions about subprocessors, transfers or your right to object: hello@timetobill.nl. For a formal privacy request: use the form at /legal/privacy-request. For a complaint: /legal/complaint or directly to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl/klacht.

---

STB Services — Parallelweg 30, 5223 AL 's-Hertogenbosch, the Netherlands — Chamber of Commerce (KvK) 30226252 — VAT NL001685860B73 — hello@timetobill.nl