Sub-processors
Last updated 2026-09-30.
These are the third parties that process data on our behalf to provide
ogmake, as referred to in our Data Processing Addendum.
Where a provider handles your customer content (the first two entries), we
are its processor and they are our sub-processor. The other providers
handle account and billing data, for which we are the controller; see
our Privacy Policy.
Cloudflare, Inc.
- Purpose
- Hosting and rendering: Workers, D1 (database), R2 (storage), Browser Rendering, usage counters (Analytics Engine), and Email Routing for inbound support email.
- Data
- Customer content sent to render, stored renders and uploads, account and API key records, support emails you send us.
- Location and transfers
- Global edge network; may process outside your country, including the United States. Per Cloudflare's DPA.
Google LLC (Gemini API)
- Purpose
- Generating AI designs, only when you use that feature.
- Data
- The text prompt you type for an AI design. With "Design from my site", also the site's host, title, tagline, font names, brand colours (when you give none) and whether it has a logo, taken from the page you give us.
- Location and transfers
- Per Google's data processing terms and the Gemini API terms.
Paddle.com Market Limited
- Purpose
- Merchant of Record: checkout, payments, invoices, tax, refunds.
- Data
- Your payment details (held by Paddle, never by us), billing contact, customer id, subscription status.
- Location and transfers
- Per Paddle's privacy notice. Paddle acts on its own terms as Merchant of Record.
Resend, Inc.
- Purpose
- Transactional email: sign-in links and account notices.
- Data
- Your email address and the content of the email sent to you.
- Location and transfers
- Per Resend's DPA.
Changes to this list
We email account owners at least 30 days before we add or replace a
sub-processor. To object, write to
support@ogmake.com within that
period, as described in section 5 of the
Data Processing Addendum.
