ProductLift uses a small number of trusted third-party service providers (“subprocessors”) to help deliver our service. These subprocessors may process limited personal data on our behalf for the specific purposes listed below.
We carefully evaluate each provider’s security, privacy, and compliance posture. Where applicable, we enter into Data Processing Agreements (DPAs) and Standard Contractual Clauses (SCCs) or other appropriate safeguards.
| Subprocessor | Purpose | Data Categories | Processing Location | Notes |
|---|---|---|---|---|
| DigitalOcean, LLC | Application hosting & infrastructure | Account data, content you submit in the app, logs | EU data centers | Main hosting provider for ProductLift |
| Amazon Web Services, Inc. (AWS S3) | Storage of static assets & backups | File uploads (e.g., images, attachments), backups | EU data centers | Used for file uploads and encrypted backups |
| Mailgun Technologies, Inc. | Transactional email delivery | Recipient email, sender name, message metadata | EU data centers | Can be replaced by SMTP or another email provider upon request |
| Stripe, Inc. | Payment processing & billing | Billing name, email, payment method details | EU/US data centers | Processes payments and subscription lifecycle events |
| OpenAI, L.L.C. | AI functionality (optional) | Prompts you submit to AI features and generated outputs | US | Only used when AI features are enabled |
| Boei | Customer support chat (admins only) | Name, email, chat messages | NL/EU | Loaded in the admin area for support communications |
We may add or replace subprocessors as our service evolves. When we do, we will update this page. If you have a DPA with ProductLift, we will provide notice in accordance with that agreement.
If you have questions about our subprocessors or need a signed DPA, contact us at [email protected].
Last updated: 2025-12-05