Sub-processors
Last Updated: 2026-05-04
Version: 1.0
We use the following sub-processors to deliver LingoPlace. Each sub-processor has been
evaluated for GDPR compliance and operates under a data processing agreement.
| Sub-processor | Purpose | Location | Legal Mechanism |
|---|---|---|---|
| DigitalOcean, LLC | Cloud infrastructure hosting | Netherlands (AMS3, EU) | EU hosting; DPA in place |
| ActiveCampaign LLC (Postmark) | Transactional email delivery (login links, account notifications) | United States | SCCs; tracking pixels disabled |
| Polar Software Inc. | Payment processing — Merchant of Record for subscriptions and one-time purchases | United States | SCCs; MoR handles cardholder payment data independently |
| Functional Software, Inc. | Error monitoring and crash diagnostics (Sentry) | United States | DPA/SCCs |
| Grafana Labs, Inc. | Application observability and telemetry | United States/EU | DPA/SCCs |
| OpenAI OpCo, LLC | AI tutoring — conversation processing | United States | SCCs; we do not send personal identifiers (name, email) |
| Anthropic, PBC | AI tutoring — conversation processing | United States | SCCs; we do not send personal identifiers (name, email) |
| Google LLC (Gemini API) | AI tutoring — conversation processing | United States | SCCs; we do not send personal identifiers (name, email) |
Note on visitor analytics: We use the open-source Umami analytics tool, self-hosted
on our own EU infrastructure (analytics.joinwith.com). No third-party analytics
provider processes visitor analytics data. See Privacy Policy
for full details.
Notification of changes: We will notify users by email and update this page at least
14 days before any new sub-processor is activated that processes personal data.
Data Processing Agreements: copies of executed DPAs and SCCs with each sub-processor are available on request at the data-controller contact in our Privacy Policy.