1. Overview
A "sub-processor" is a third party we use to help deliver the Service that may process personal data. Each is bound by a data processing agreement (or equivalent terms) requiring appropriate security and confidentiality. We only share the minimum data each needs for its purpose.
2. Current sub-processors
Hostinger (VPS hosting)
- Purpose: Application, database, and cache hosting
- Data processed: All Service data at rest (accounts, polls, votes)
- Location: European Union
Cloudflare
- Purpose: DNS, CDN, TLS, bot protection (Turnstile), secure tunnel, optional web analytics
- Data processed: IP address, request metadata, page views
- Location: Global (EU edge)
Whop
- Purpose: Payments and subscription management (Merchant of Record)
- Data processed: Billing details, payment method, transaction history
- Location: United States
- Purpose: Optional single sign-on (OAuth)
- Data processed: Google account ID, email, name, profile picture
- Location: Global
Plausible Analytics
- Purpose: Privacy-friendly product analytics (loaded only with consent)
- Data processed: Aggregated, anonymous usage events; no personal profiles
- Location: European Union
Groq
- Purpose: AI features when configured: Pulse chat, poll/quiz generation, and branching assistance
- Data processed: Prompts, editing instructions, and chat messages submitted to those features
- Location: United States
Google Gemini
- Purpose: AI inference fallback when configured
- Data processed: Prompts, editing instructions, and chat messages submitted to AI features
- Location: Global
Cerebras
- Purpose: AI inference fallback when configured
- Data processed: Prompts, editing instructions, and chat messages submitted to AI features
- Location: United States
Cloudflare Workers AI
- Purpose: AI inference fallback when configured
- Data processed: Prompts, editing instructions, and chat messages submitted to AI features
- Location: Global
OpenRouter
- Purpose: Optional AI routing (typically staging/fallback when configured)
- Data processed: Prompts, editing instructions, and chat messages submitted to AI features
- Location: Global
MXroute
- Purpose: Transactional email delivery (account, billing, product, and support mail)
- Data processed: Recipient email address, subject, and message content required to deliver the email
- Location: United States
3. Transfer safeguards
Our core application and database are hosted in the European Union. Where a sub-processor may process data outside your country, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and, where relevant, the EU-US Data Privacy Framework. See our Privacy Policy for more on international transfers.
4. Changes & notice
We may add or replace sub-processors as the Service evolves. Material changes will be reflected on this page with an updated date. Enterprise customers with a signed Data Processing Agreement can request advance notice of new sub-processors.
5. Contact
Questions or a Data Processing Agreement request? [email protected] or use our contact form and choose "Privacy / GDPR".