As described in our Data Processing Agreement, MailOdds engages the following sub-processors for the processing of personal data on behalf of our customers. This list is maintained per GDPR Article 28(2).
| Sub-Processor | Purpose | Data Processed | Location | Transfer Mechanism |
|---|---|---|---|---|
| Contabo GmbH | Infrastructure hosting | All service data | Germany (EU) | N/A (intra-EEA) |
| Stripe, Inc. | Payment processing | Billing email, customer ID, payment metadata | United States | EU-US Data Privacy Framework |
| Cloudflare, Inc. | Bot protection (Turnstile), DNS management | IP address, bot verification token | United States | EU-US Data Privacy Framework |
| Proton AG | Transactional email delivery | Recipient email, message content | Switzerland | EU adequacy decision |
| Google LLC | OAuth authentication (optional) | Email, name, OAuth token | United States | EU-US Data Privacy Framework |
| GitHub, Inc. (Microsoft) | OAuth authentication (optional) | Email, name, OAuth token | United States | EU-US Data Privacy Framework |
Change notification
We will notify customers of any changes to our sub-processors with at least 30 days advance notice, per our Data Processing Agreement. If you have questions about our sub-processors, please contact dpo@mailodds.com.