Legal
Sub-processors
Last updated: October 11, 2026
These companies process personal data on our behalf to provide Maxspell services. Each is bound by a data processing agreement. See our Privacy Policy and Data Processing Addendum for how we use them.
Current Sub-processors
| Company | What they do for us | Location | Safeguard |
|---|---|---|---|
| Oracle (Oracle Cloud Infrastructure) | Servers and databases for the website, Maxspell ID, the dashboard, Business Email and our other services. | European Union | Data stays in the EU. |
| Cloudflare, Inc. | Content delivery, DNS, protection against attacks, and Turnstile bot checks on forms. | Global network (United States company) | EU–US Data Privacy Framework and the EU Standard Contractual Clauses. |
| Mailgun Technologies, Inc. | Sending service emails: sign-in codes, billing notices, and contact form messages. | European Union region (United States company) | EU–US Data Privacy Framework and the EU Standard Contractual Clauses. |
| Stripe Payments Europe, Ltd. | Payments, saved payment methods, invoices, and fraud prevention. | Ireland, with transfers to Stripe, Inc. in the United States | EU–US Data Privacy Framework and the EU Standard Contractual Clauses. |
Cloud Hosting accounts are stored on servers in the location you choose when you order. We add the provider of each location to this list before the location opens for orders.
Independent Providers
If you sign in with Google, Facebook (Meta), GitHub, that provider acts as an independent controller under its own privacy policy, not as our sub-processor.
Changes to This List
We update this page and email team owners at least 30 days before a new sub-processor starts processing customer personal data. To object, email [email protected] within that period.