Sub-processors

Last updated: 3 September 2026

DRAFT — pending review by a qualified solicitor. The list below reflects the current build. Vendors and regions marked TBC are not yet finalised.

These third parties process personal data on our behalf to deliver the Service. Each is bound by data-protection terms. We give notice before adding or replacing a sub-processor; see the Data Processing Addendum for your right to object.

Sub-processor	Purpose	Data	Region
Stripe	Payment processing and invoicing	Billing contact, card handled by Stripe (not us), subscription metadata	EU / US (SCCs)
Brevo (Sendinblue)	Transactional email delivery (reminders, account email)	Recipient name and email address, message content	EU
Twilio	SMS and WhatsApp delivery — under the Customer's own Twilio account	Recipient phone number, message content	US (SCCs) — governed by the Customer's own Twilio agreement
Hosting provider `(TBC — Hostinger, UK/EU region)`	Application and database hosting, backups	All Service data at rest	UK / EU
Error monitoring `(TBC — Sentry)`	Crash and error diagnostics	Request metadata, stack traces (may incidentally include identifiers)	EU / US (SCCs)

The marketing website is served as static files and, if hosted on Cloudflare Pages or Netlify (TBC), that provider processes standard web-server request logs. It sets no cookies — see the Cookie Policy.

Notifications

To be notified of changes to this list, email privacy@matterdue.com.