Legal
Subprocessors
We engage subprocessors (service providers) to help operate the GizmoSauce Services. This list is provided for transparency and is updated when our subprocessors change.
Last updated: January 6, 2026
This list should be read together with our Privacy Policy and, for Customers embedding widgets, our Data Processing Addendum (DPA).
We remain responsible for our subprocessors and require appropriate contractual and security safeguards. Subprocessors only access data as needed to provide their services to GizmoSauce.
If you would like to receive notice of material subprocessor changes, contact moc.ecuasomzig@ycavirp.
| Subprocessor | Category | Purpose | Data Processed | Location |
|---|---|---|---|---|
| Cloudflare, Inc. | Security & CDN | Content delivery, DDoS protection, TLS termination, and performance. | IP address, request metadata, and cached asset delivery logs. | Global (varies by edge region; customer traffic may be processed worldwide). |
| Stripe, Inc. | Payment Processing | Subscription billing, invoicing, and payment processing. | Customer identifiers, billing metadata, and payment-related data handled by Stripe. | United States and other regions (per Stripe configuration). |
| Mailgun Technologies, Inc. | Email Delivery | Transactional email delivery (e.g., verification emails, account notifications). | Email address, message metadata, and email contents required to deliver messages. | United States and other regions (per Mailgun configuration). |
| Meta Platforms, Inc. | Authentication & Social APIs | Facebook/Instagram/Threads login and API access for connected social widgets. | OAuth tokens, page/account identifiers, profile details, and requested content metadata. | United States and other regions (per Meta services). |
| Google LLC | Authentication & Analytics | Sign-in with Google; optional analytics (if configured) for product usage insights. | OAuth tokens/identifiers, basic profile info (for sign-in), and analytics identifiers/events (if enabled). | United States and other regions (per Google services). |
| Microsoft Corporation | Analytics | Optional product analytics and session insights to improve UX. | Usage interactions and device/browser signals (as collected by Clarity, if enabled). | United States and other regions (per Microsoft services). |
| Amazon Web Services, Inc. / Cloudflare, Inc. | Storage | Store widget assets and files (e.g., uploaded media) and serve embed releases, via AWS S3 or Cloudflare R2 depending on deployment. | Files and asset metadata uploaded to the platform. | Region configured by GizmoSauce (varies by deployment). |
Notes
- This list covers subprocessors used to operate GizmoSauce. Customers may independently connect third-party platforms via widgets; those third parties may have their own privacy practices and are not GizmoSauce subprocessors.
- Some services are only used if enabled or configured (for example, analytics). If not enabled, those services do not receive data from GizmoSauce.