Legal
Subprocessors
We use subprocessors (service providers) to help operate the GizmoSauce Services. This list is provided for transparency and is updated when our subprocessors change.
Last updated: January 6, 2026
This list should be read together with our Privacy Policy and, for Customers embedding widgets, our Data Processing Addendum (DPA).
If you would like to receive notice of material subprocessor changes, contact [email protected].
| Subprocessor | Category | Purpose | Data Processed | Location |
|---|---|---|---|---|
| Cloudflare | Security & CDN | Content delivery, DDoS protection, TLS termination, and performance. | IP address, request metadata, and cached asset delivery logs. | Global (varies by edge region; customer traffic may be processed worldwide). |
| Stripe | Payment Processing | Subscription billing, invoicing, and payment processing. | Customer identifiers, billing metadata, and payment-related data handled by Stripe. | United States and other regions (per Stripe configuration). |
| Mailgun | Email Delivery | Transactional email delivery (e.g., verification emails, account notifications). | Email address, message metadata, and email contents required to deliver messages. | United States and other regions (per Mailgun configuration). |
| Google (OAuth / APIs / Analytics, if enabled) | Authentication & Analytics | Sign-in with Google; optional analytics (if configured) for product usage insights. | OAuth tokens/identifiers, basic profile info (for sign-in), and analytics identifiers/events (if enabled). | United States and other regions (per Google services). |
| Microsoft Clarity (if enabled) | Analytics | Optional product analytics and session insights to improve UX. | Usage interactions and device/browser signals (as collected by Clarity, if enabled). | United States and other regions (per Microsoft services). |
| S3-compatible object storage (e.g., AWS S3 or Cloudflare R2) | Storage | Store widget assets and files (e.g., uploaded media) and serve embed releases. | Files and asset metadata uploaded to the platform. | Region configured by GizmoSauce (varies by deployment). |
Notes
- This list covers subprocessors used to operate GizmoSauce. Customers may independently connect third-party platforms via widgets; those third parties may have their own privacy practices and are not GizmoSauce subprocessors.
- Some services are only used if enabled or configured (for example, analytics). If not enabled, those services do not receive data from GizmoSauce.