Last updated: October 2, 2026
WPWriter is operated by YLabs. These are the third parties that may process personal data on our behalf when you use WPWriter. For how this is governed, see our Data Processing Agreement.
| Subprocessor | Purpose | Data location | Transfer safeguard |
|---|---|---|---|
| DigitalOcean, LLC | Application servers and managed PostgreSQL database | Frankfurt, Germany (EU) | EU hosting; EU-U.S. Data Privacy Framework for any access from the United States, with SCCs as fallback |
| Cloudflare, Inc. | DNS, content delivery and security (TLS, firewall) | Global edge network | EU-U.S. Data Privacy Framework and SCCs |
| Mailgun Technologies, Inc. (Sinch Email) | Sending WPWriter's emails (account, billing, notification and product emails) | United States (Mailgun US region) | SCCs and, for UK data, the UK International Data Transfer Addendum |
| Mailgun Technologies, Inc. (Sinch Email) | Receiving email sent to our support address | European Union (Mailgun EU region: Germany and Belgium) | EU hosting; SCCs for any access from outside the EEA |
| Lemon Squeezy (Sold through Link, LLC, formerly Lemon Squeezy, LLC) | Payment processing and merchant of record, subscriptions, invoices, affiliate tracking | United States | SCCs |
| PostHog, Inc. | Product analytics and session replay in the WPWriter web app (typed input is masked and not recorded) | United States | EU-U.S. Data Privacy Framework and SCCs |
| OpenAI OpCo, LLC (EEA and Swiss data: OpenAI Ireland Ltd.) | AI text and image generation, only when you use WPWriter's AI generation features | United States | SCCs |
| Anthropic, PBC | AI text generation, only when you use WPWriter's AI generation features | United States | SCCs |
| Google LLC (Gemini API) | AI text and image generation, only when you use WPWriter's AI generation features | United States and other countries where Google maintains facilities | EU-U.S. Data Privacy Framework, with SCCs as fallback |
Support correspondence (not processing on your behalf)
When you write to our support address, we handle your message as its controller; this is not processing on your behalf under our Data Processing Agreement. The message is received in Google's Gmail, where we read and answer it, and replies may be drafted with AI assistance from Anthropic (Claude). Both services are used under their providers' standard terms, not under a data processing agreement with us, and process email in the United States.
Scheduled change: from 15 October 2026, email sent to our support address will be received by Cloudflare (Cloudflare Email Routing) instead of Mailgun. The transfer will be covered by the EU-U.S. Data Privacy Framework and the European Commission's Standard Contractual Clauses.
Not subprocessors:
Changes to this list are made as set out in section 4 of our DPA. Objections: info@wpwriter.com