Sub-Processors

Last updated: January 1, 2025

This page lists the third-party sub-processors that ClickCard engages to process personal data on behalf of our customers. We carefully vet all sub-processors to ensure they meet our security and privacy standards.

Sub-Processor	Purpose	Location	Data Processed
Amazon Web Services (AWS)	Cloud infrastructure and hosting	United States / EU	All user data
Stripe	Payment processing	United States	Payment information
Google Cloud Platform	Data analytics and machine learning	United States / EU	Anonymized usage data
Twilio SendGrid	Email delivery	United States	Email addresses, names
Firebase	Authentication and push notifications	United States	Device tokens, user IDs
Sentry	Error monitoring and debugging	United States	Error logs, device info
Mixpanel	Product analytics	United States	Anonymized usage events
Intercom	Customer support	United States / EU	Name, email, support conversations
HubSpot	CRM and marketing	United States	Contact information, interactions
Cloudflare	CDN and security	Global	IP addresses, request logs

Data Processing Agreements

We have executed Data Processing Agreements (DPAs) with all sub-processors listed above. These agreements ensure that sub-processors handle personal data in accordance with GDPR and other applicable data protection regulations.

International Data Transfers

For sub-processors located outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or the processor's participation in recognized transfer mechanisms.

Changes to Sub-Processors

We may update this list when we engage new sub-processors or change existing ones. Enterprise customers with DPAs in place will be notified of changes in accordance with their agreement terms.

Questions?

If you have questions about our sub-processors or data processing practices, please contact our Data Protection Officer at privacy@clickcardapp.com