MailOdds is a global commerce platform (EU, US and APAC) spanning storefront, payments, returns, owned email and SMS/RCS sending, validation, and inbound processing. To run that platform we engage the sub-processors listed below. As described in our Data Processing Agreement, this is the authoritative list maintained per GDPR Article 28(2). Entries marked Optional are engaged only when you opt into the relevant feature or integration (for example, connecting a Shopify or Salesforce store, signing in with Google or GitHub, or exporting workflow files to Google Drive).
| Sub-Processor | Purpose | Data Processed | Location | Transfer Mechanism |
|---|---|---|---|---|
| Contabo GmbH | Infrastructure hosting (compute, databases, storage; all nodes) | All service data at rest and in transit | Germany | Intra-EEA |
| Stripe Payments Europe Ltd / Stripe, Inc. | Payment processing and Stripe Connect payouts | Billing email, customer ID, payment metadata, payout details (no card numbers stored by us) | Ireland / United States | EU-US Data Privacy Framework |
| Sinch AB | SMS and RCS message delivery | Recipient phone number (E.164), message content, delivery receipts | Sweden | Intra-EEA |
| Proton AG | Transactional/SMTP relay for platform notifications | Recipient email address, message content | Switzerland | Swiss adequacy decision |
| Cloudflare, Inc. | DNS and bot protection (Turnstile) | IP address, bot-verification token, DNS queries | United States | EU-US Data Privacy Framework |
| Google LLC Optional | Optional sign-in (OAuth) | Email, name, OAuth token (only if you sign in with Google) | United States | EU-US Data Privacy Framework |
| GitHub, Inc. (Microsoft) Optional | Optional sign-in (OAuth) | Email, name, OAuth token (only if you sign in with GitHub) | United States | EU-US Data Privacy Framework |
| Shopify, Inc. Optional | Optional store connection (catalog/order sync) | Shop credentials/OAuth tokens, product and order data you choose to sync | United States | EU-US Data Privacy Framework |
| Salesforce, Inc. Optional | Optional store connection (CRM/commerce sync) | Org ID, OAuth tokens, contact and order records you choose to sync | United States | EU-US Data Privacy Framework |
| Google LLC (Google Drive) Optional | Optional file storage for automation workflows (e.g. n8n) | Files you choose to export/import (e.g. lists, job results) | United States | EU-US Data Privacy Framework |
Change notification
We will notify customers of any changes to our sub-processors with at least 30 days advance notice, per our Data Processing Agreement. If you have questions about our sub-processors, please contact dpo@mailodds.com.