Current subprocessors
The following third parties process limited personal data on our behalf to deliver LyEve. Each operates under a Data Processing Agreement and the European Commission's Standard Contractual Clauses where applicable. The list names only services that are live today. We add a row before a new service starts processing data, not after.
| Subprocessor | Purpose | Data category | Region |
|---|---|---|---|
| PayPal (Europe) S.à r.l. et Cie, S.C.A. | Payments, subscriptions, one-time orders | Email, PayPal payer ID, transaction metadata | Luxembourg, US |
| Amazon Web Services (Amazon SES) | Transactional email delivery | Email address, message body | ap-southeast-1 (Singapore) |
| Amazon Web Services (Amazon S3) | Object storage for media and release artifacts | Uploaded media and build artifacts | ap-southeast-1 (Singapore) |
| Amazon Web Services (Amazon EC2) | Hosting for the application and its PostgreSQL database, which we run ourselves on our own servers | Account, billing and license records, and all other operational data | EU (Frankfurt, eu-central-1) |
| GitHub, Inc. | Source-code hosting and image registry | No customer PII | US |
| Cloudflare | DNS, TLS, DDoS protection, CDN | Request metadata, IP | Global |
Notice of changes
Active customers are notified by email at least 14 days before a new subprocessor is added. To object to a new subprocessor, write to privacy@lyeve.com before the effective date. Legitimate objections may result in service termination by either party where the subprocessor is operationally critical.