Sub-processors
Last updated: July 31, 2026
This page lists every third party that DeployYourApp engages to process personal data in connection with the Service. It is the authoritative list referenced by our Data Processing Agreement and our Privacy Policy.
The list is short by design. We do not use third-party analytics, advertising, session recording, error tracking, support chat, CDN script, or web font providers on the website or in the dashboard. No third-party script of any kind is loaded by our front end.
Current sub-processors
| Sub-processor | Purpose | Categories of personal data | Processing location |
|---|---|---|---|
| Stripe, Inc. | Payment processing, subscription billing, invoicing, and payment fraud prevention | Name, billing email address, billing address and payment card details (collected directly by Stripe — card numbers never reach our servers), subscription and plan data, invoice and transaction history, and the IP address and device data Stripe collects for its own fraud checks | United States and other countries where Stripe operates. [Confirm applicable Stripe entity and data region for your account — TO BE COMPLETED] |
| Resend | Delivery of transactional email: address verification, password reset, team invitations, plan-limit and billing notices, and security alerts | Recipient email address, recipient name, and message content. For security alerts the message body includes the IP address and user agent of the request that triggered the alert | United States. [Confirm Resend processing region — TO BE COMPLETED] |
| [Hosting provider name — TO BE COMPLETED] | Hosting of the application servers, PostgreSQL database, Redis, and object storage; network delivery and infrastructure backups | All personal data described in the Privacy Policy, as it resides on the infrastructure: account data, audit logs including IP addresses and user agents, end-user device records, analytics events, and uploaded bundles | [Hosting region — TO BE COMPLETED] |
Not a sub-processor: our object storage
Update bundles are stored in MinIO, which we run ourselves on the same infrastructure as the rest of the Service. It is our own software on our own servers, not a separate company, so no additional third party receives your bundles through it. The underlying machines are supplied by the hosting provider listed above, which is why that provider — and only that provider — appears in the table.
If a content delivery network is configured for bundle downloads, that CDN provider will be added to the table above before it is enabled in production. [Add CDN provider here if one is enabled at launch — TO BE COMPLETED or confirm not applicable]
Optional integrations you control
Some features send data to a third party only because you configured them to. These are not our sub-processors — you choose them, you hold the credentials, and the transfer is on your instruction:
- Single sign-on with Google, GitHub, or Microsoft. If you sign in this way, we receive your name, email address, and provider account identifier from that provider. That is a disclosure to us, not by us; the provider's own privacy policy governs your relationship with them.
- Reserved for future cloud build and app-store publishing features, which are not yet available. Where you would upload signing certificates or store API credentials, we transmit builds to the store you nominated (for example Apple or Google) on your instruction.
Changes to this list
- We give at least 30 days' notice before adding or replacing a sub-processor. Notice is given by updating this page and emailing the notification address on affected accounts.
- To receive change notifications by email, write to info@deployyour.app asking to be added to the sub-processor notification list.
- Customers may object to a new sub-processor on reasonable data protection grounds within the notice period. The objection process and its consequences, including termination without penalty and a pro-rated refund where we cannot offer an alternative, are set out in Section 6 of the DPA.
- Each sub-processor is engaged under a written contract imposing data protection obligations no less protective than those in our DPA, and we remain liable for their performance.
Questions
Data protection questions: info@deployyour.app. Contract and DPA questions: info@deployyour.app.