Subprocessors
Effective: June 23, 2026 Last updated: June 23, 2026
To provide Muzan we rely on the third-party providers below (sub-processors), which process personal data on our behalf under data-protection terms equivalent to our DPA. This page forms part of Annex C of the DPA.
1. What a sub-processor is
A sub-processor is a third party we engage to process personal data on our behalf to help us deliver the Service. We remain responsible to you for their compliance.
2. Current sub-processors
Stripe, Inc.
Purpose: payment processing, subscription billing, and fraud prevention. Data: billing contact, subscription and transaction records, and payment-method data (handled by Stripe; we do not store full card numbers). Location: United States and global.
Supabase, Inc.
Purpose: database, file storage, and authentication for the Service. Data: account and profile data, authentication credentials, uploaded Content, and usage/log data. Location: managed cloud hosting in the configured region.
Vercel, Inc.
Purpose: hosting and delivery of the web applications. Data: request and log data, including IP address, processed to serve the applications. Location: United States and global edge network.
Google (Google Fonts)
Purpose: delivery of web fonts via content-delivery network. Data: IP address and request data, exposed as a technical necessity of delivering the fonts; not used by us for profiling. Location: global.
Resend
Purpose: delivery of transactional and service emails. Data: recipient name and email address and the content of service emails. Location: United States.
3. International transfers
Some sub-processors process data in the United States or other countries. Where required, such transfers are covered by appropriate safeguards (for example, the Standard Contractual Clauses and the UK Addendum), as described in our Privacy Policy and DPA.
4. Change notification and objection
We keep this list current. When we add or replace a sub-processor, we will give reasonable prior notice and an opportunity to object on reasonable data-protection grounds, as set out in our DPA. To receive change notifications, contact us at the address below.
5. Contact
Questions, change-notification requests, or objections: privacy@muzan.app.