1. What this page is
This page lists the subprocessors — third parties that process personal data on our behalf to run the Platform. Self-hosted infrastructure we operate ourselves (rather than a third party) is noted separately, not listed as a subprocessor.
2. Subprocessors
| Provider | Service | Role | Data categories | Location / transfer | Status |
|---|---|---|---|---|---|
| Cloudflare, Inc. | CDN, reverse proxy, DDoS protection; R2 object storage | Processor | IP addresses, request metadata; uploaded logos/images | Global network; Cloudflare's own transfer safeguards | Production |
| Oracle Cloud Infrastructure | Application and database hosting | Processor | All personal data processed by the Platform | Frankfurt, Germany (EEA) | Production |
| Google LLC | "Continue with Google" sign-in | Independent Identity Provider / Controller | Business Owner/Staff Member email, Google account identifier | United States; Google's own transfer safeguards | Production |
| Google LLC | Google Analytics (marketing site only, opt-in) | Processor | Pseudonymous visitor usage data, only after consent | United States; Google's own transfer safeguards | Production |
| Brevo | Transactional email delivery | Processor | Recipient email address; email content (e.g. verification, reset links) | European Union | Production |
| Telegram | Bot API and Mini App delivery channel | Independent party under its own terms | Telegram ID, username, first/last name; messages sent through the bot | Global; governed by Telegram's own terms, outside our control | Production |
| Dodo Payments | Merchant of Record / payment and subscription processing | Merchant of Record (independent party for the payment transaction) | Payment details entered in Dodo's hosted checkout; the plan, billing period and internal account identifier we send; the Business Owner's email (only if verified); billing contact, address and tax details for the transaction | Dodo Payments (headquartered in India); processing locations and transfer safeguards under Dodo's own terms | Production |
Dodo Payments is our Merchant of Record for paid subscriptions (see our Terms of Service, Section 8, and Privacy Policy, Section 9). As Merchant of Record it acts as an independent party for the payment transaction rather than purely on our instructions; it is listed here so every third party that handles Business Account data is on one page.
3. Self-hosted infrastructure (not a subprocessor)
- PostgreSQL — our primary database, self-hosted on our own server; not a third-party processor.
- Mailu — our self-hosted mail stack, used only for inbound support/admin mailboxes; outbound transactional email goes through Brevo instead.
- Caddy — our self-hosted reverse proxy/TLS layer.
4. Changes to this list
We will update this page, including Status changes, whenever a subprocessor is added, removed, or goes live. Material changes to our production subprocessors will also be communicated to Business Owners via email or through an Owner Dashboard notification prior to implementation, giving Businesses the opportunity to object. Businesses relying on our Data Processing Agreement can check back here for the current list.
5. Contact
Questions about our subprocessors can be sent to [email protected].