Version October 28, 2026
Service Providers and Subprocessors
Last updated: October 28, 2026
This page lists the companies that process personal information on LinkInCare's behalf, what they do for us and where they process it. Each one acts only on our instructions under a written contract, and none of them may use your information for their own purposes. It complements the "Who we share information with" section of our Privacy Policy. We update this page when we add or replace a provider, and the date at the top shows the current version.
Infrastructure and platform
| Provider | What it does for us | Data it handles | Location |
|---|---|---|---|
| Amazon Web Services (AWS), Amazon Cognito | Sign-in, passwords, verification codes, multi-factor authentication | Email, phone number, password (hashed by AWS), sign-in events | United States (us-east-1) |
| AWS, Amazon RDS for PostgreSQL and Amazon DynamoDB | Databases | All account, profile, campaign, billing-mirror and moderation data | United States (us-east-1) |
| AWS, Amazon S3 and Amazon CloudFront | File storage and delivery | Profile photos, resumes, advertiser logos | United States (us-east-1) |
| AWS, Amazon GuardDuty Malware Protection | Scans every upload for malware before it is served | Uploaded files | United States (us-east-1) |
| AWS, Amazon SES | Sends our email | Email address, email content | United States (us-east-1) |
| AWS, Amazon SNS (sent through Amazon Cognito), with the toll-free number registered in AWS End User Messaging | Sends verification and sign-in codes by text message | Phone number, code | United States (us-east-1) |
| AWS, Amazon SQS, ECS, CloudWatch, KMS, Secrets Manager, WAF | Queues, compute, logs, encryption keys, request filtering | Operational data and logs (30-day retention) | United States (us-east-1) |
| AWS, Amazon Bedrock Guardrails | Automated text classification for moderation, when switched on | Post and comment text at the moment of the check; not stored by the service | United States (us-east-1) |
Payments
| Provider | What it does for us | Data it handles | Location |
|---|---|---|---|
| Stripe, Inc. | Advertiser payments, subscriptions, invoices, billing portal | Advertiser name, billing email, payment method (not seen by LinkInCare), invoices | United States |
Security
| Provider | What it does for us | Data it handles | Location |
|---|---|---|---|
| Cloudflare, Inc. (Turnstile) | Anti-bot check on registration forms | Browser signals and IP address during the check | United States and global edge |
Data sources we query (not processors)
| Provider | Why we use it | Data sent |
|---|---|---|
| CMS National Plan and Provider Enumeration System (NPPES) | Optional NPI check for CareMembers who enter an NPI | The NPI number and name entered |
| United States Census Bureau ZCTA gazetteer | Zip code centroids for distance calculation | None sent; a public data file loaded into our database |
Content providers you choose to load
YouTube (Google), TikTok and Instagram (Meta) receive your IP address and browser information only when you tap to load a video embedded in a post. Before you tap, only a YouTube thumbnail may load. These providers act under their own privacy policies, not as our processors.
Not used
LinkInCare does not use analytics, advertising, session-recording, customer-messaging or AI-training vendors, and no third-party scripts run on our pages other than Stripe.js (the payment element, Link and Checkout) in the advertiser dashboard and Cloudflare Turnstile on registration forms.
Contact
Questions about our providers: support@linkincare.com.