Sub-processors
Effective 1 September 2026
A sub-processor is a company we use to run part of the service, and which handles some of your data to do so. This is the complete list, by role. Each entry says what the company does for us, what it receives, and where it operates. Names are available on request to customers who need them for their own records.
1. Hosting and delivery
Our hosting provider (European Union): hosts the application, the website and the databases. All account data and all shop data are stored here.
Cloudflare (United States, global network): sits in front of both sites to deliver pages, block attacks and tell people from automated traffic. It sees traffic in transit and holds no account data at rest.
2. Payments
Stripe (United States): takes card payments, runs subscriptions and holds card details. Card numbers never reach our servers. Stripe sends us your email address, the plan you bought and the outcome of each payment.
3. Email
Our transactional email provider (United States): delivers the messages the application sends you, such as verification codes, receipts and renewal reminders.
Our mailing-list provider (United States): holds the list used for product announcements and the account-state lists that decide who receives which message. It mirrors the application; the application is the master.
A second email delivery provider (United States): delivers campaign mail for time-limited offers.
4. Enrichment and export
Our enrichment provider (United States): when you run a contact enrichment, we send it the shop's domain and it returns the contact routes it can find. It receives the domain and nothing about you.
Google (United States): when you export to Google Sheets, the rows you chose are written to a spreadsheet in your own Google account under a permission you grant and can revoke. Google PageSpeed Insights supplies the performance measurements in the shop data; it receives shop domains, not customer data.
5. Measurement and advertising on the marketing site
The optional analytics and advertising providers on myleadfox.com run only with your consent and are listed, with what each one does, in the cookie policy. They are not used in the application.
6. When this list changes
We tell customers by email at least 15 days before a new sub-processor starts handling account data, and this page changes on the same day. If you object on data-protection grounds and we cannot resolve it, you may cancel and receive a pro-rata refund of any prepaid period.
Questions about any company on this list can be sent to hi@myleadfox.com and a person will answer.