Last updated: September 27, 2026
WPWriter is operated by YLabs. These are the third parties that may process personal data on our behalf when you use WPWriter. For how this is governed, see our Data Processing Agreement.
| Subprocessor | Purpose | Data location | Transfer safeguard |
|---|---|---|---|
| DigitalOcean, LLC | Application servers and managed PostgreSQL database | Frankfurt, Germany (EU) | EU hosting; EU-U.S. Data Privacy Framework for any access from the United States, with SCCs as fallback |
| Cloudflare, Inc. | DNS, content delivery and security (TLS, firewall) | Global edge network | EU-U.S. Data Privacy Framework and SCCs |
| Mailgun Technologies, Inc. (Sinch Email) | Transactional and support email | European Union (Mailgun EU region: Germany and Belgium) | EU hosting; SCCs for any access from outside the EEA |
| Lemon Squeezy (Sold through Link, LLC, formerly Lemon Squeezy, LLC) | Payment processing and merchant of record, subscriptions, invoices, affiliate tracking | United States | SCCs |
| PostHog, Inc. | Product analytics and session replay in the WPWriter web app (typed input is masked and not recorded) | United States | EU-U.S. Data Privacy Framework and SCCs |
| OpenAI OpCo, LLC (EEA and Swiss data: OpenAI Ireland Ltd.) | AI text and image generation, only when you use WPWriter's AI generation features | United States | SCCs |
| Anthropic, PBC | AI text generation, only when you use WPWriter's AI generation features | United States | SCCs |
| Google LLC (Gemini API) | AI text and image generation, only when you use WPWriter's AI generation features | United States and other countries where Google maintains facilities | EU-U.S. Data Privacy Framework, with SCCs as fallback |
Not subprocessors:
We notify changes to this list at least 14 days in advance by updating this page. Objections: info@wpwriter.com