These companies process personal data on our behalf to run Books Machine.
Current subprocessors
| Company | What it does | Location |
|---|---|---|
| Cloudflare, Inc. | Hosting and running the application, databases, file storage, queues, PDF rendering, and receiving receipts emailed to a workspace inbox. | United States, global network |
| Polar | Merchant of record for subscriptions: checkout, payment processing, invoices and sales tax. | United States and European Union |
| Resend | Sending account emails (verification, password resets, invitations, notices), and emails for workspaces that use our shared sending service. | United States |
| Migadu | Hosting the mailboxes that receive the messages you send to our support, privacy and legal addresses. | Switzerland |
Services you choose
Some services only receive data because you connect them, and each acts under your own agreement with it, not as our subprocessor:
- Stripe, when you connect your Stripe account to take card payments from your clients.
- Your email provider, when you connect your own SMTP, Resend or Postmark account to send from your domain.
- Google or GitHub, when you choose to sign in with them.
- Your AI assistant, such as Claude or ChatGPT, when you connect it with a workspace key. It receives only what it requests with that key.
- An S3-compatible storage account, when you configure one to receive copies of your backups.
Exchange rates are fetched from the European Central Bank's public reference feed. No personal data is sent to it.
Changes
We give at least 30 days' notice before adding a subprocessor by updating this page and emailing workspace members, as described in the Data Processing Addendum.