Version 1.0 — 14 September 2026
Manager5 is operated by TJ Soft Sp. z o.o.. Contact for data matters: kontakt@tjsoft.pl. We do not sell our customers' or their users' data. We share with providers only the data needed to perform the service or the customer's instructions. The scope depends on the features used.
The following entities help us process data entrusted by customers. Hosting and backups cover data stored in the service; email and AI receive data related to a particular feature.
OVH Sp. z o.o. (OVHcloud), Poland — hosting and DNS. Provides application infrastructure, databases, files and local backups. The production server is in the WAW1 data centre in Warsaw, Poland. DNS services cover information needed to operate domains. Service access and participation of group entities are governed by the OVHcloud data protection terms.
Google Workspace / Google Drive, Google group — external backups. We use business Google Workspace billed by Google Cloud Poland Sp. z o.o. in Poland. Database and file backups are encrypted before being sent to a Google Drive shared drive. Google also processes technical information about files and service use. Google's infrastructure and support are global, covering the EEA and countries outside the EEA, including the USA; we do not promise that backups are stored exclusively in the EEA. Applicable transfer mechanisms are described in the Google data processing terms, and locations and entities involved in providing the service in the Google Workspace list.
Plus Five Five, Inc. (Resend), USA — email. Handles sending and receiving messages: sender and recipient addresses and names, content, attachments and delivery information. Processing includes the USA. The Resend data processing terms provide for standard contractual clauses for data transfers; infrastructure and further entities are described in the Resend list.
OpenAI Ireland Ltd., Ireland — AI, translations and search. Receives content needed for a particular task, translation or search indexing, with necessary context. This does not mean sharing the customer's entire database. We use the global API service; processing may take place in the USA and other countries identified in the OpenAI list. The OpenAI data processing terms describe transfer safeguards. Data retention depends on the feature used and the API data rules; we do not promise the complete absence of provider-side logs.
The following services have distinct roles. For their own obligations, such as payment processing, account security or maintaining a public register, their operators act as independent controllers. Not all of these entities are our subprocessors.
Stripe Payments Europe, Limited, Ireland, and mElements S.A. (Paynow), Poland — payments. When the relevant method is selected, they receive payer and transaction data needed to process it and required technical information. They have their own obligations concerning settlement, fraud prevention and legal compliance. Stripe may also act as a processor for certain services. Details of roles and transfers outside the EEA: Stripe, the Stripe data processing terms and Paynow / mElements. If a customer connects their own payment account, their agreement with the operator also applies.
Google Ireland Limited and Google group entities — sign-in and fonts. Google sign-in applies to people who choose that method; the account identifier and basic profile data needed to sign in are exchanged. Certain application screens load Google Fonts, which shares the IP address and technical browser request information with Google. These flows are separate from backups. Processing may be global; details are set out in the Google privacy policy.
Statistics Poland and the Ministry of Justice, Poland — business verification. Business details are checked against the REGON and KRS registers. Identifiers needed to find an entry, such as NIP or KRS, are shared, rather than customer records stored in Manager5. The registers operate under the laws governing them.
Head Office of Geodesy and Cartography (GUGiK), Poland, and OpenStreetMap Foundation, United Kingdom — finding address coordinates. GUGiK is the primary provider and OSMF Nominatim is the fallback service. A query contains the address needed to determine the location and technical connection data from our server. OSMF describes processing locations and protection rules in its privacy policy. These public geographic services do not receive the entire database or the contents of customer documents.
The Manager5 operator's registered office is a location for service administration, rather than the location of all provider systems. We store the application's main data on the identified server in Poland. Other flows are described above; a provider's registered office does not mean all its operations take place in that country.
A transfer outside the EEA requires a basis under Chapter V GDPR, such as an applicable adequacy decision or standard contractual clauses with the required safeguards. The linked terms identify providers' transfer mechanisms. An entry in this list alone does not replace such a basis or authorise unrestricted data transfers. Information about safeguards is available on request at the contact address above.
We notify the account email address of a new or replacement subprocessor at least 14 days before sharing data with it, under the Manager5 agreement. During that time, you may raise a justified data protection objection; the new entity will not receive the data covered by the objection until it is resolved. Updating this page does not replace notification. This list documents services currently used and does not enable new integrations.
Our processing of data as a controller is described in the privacy policy. This list is the shared source of provider information for the Manager5 agreement and website; details of individual providers' infrastructure remain in their linked lists.