Subprocessors
Every company that processes personal data for WPMaven, what it does, and where
WPMaven is run by YOTAKO S.A. in Luxembourg. To build, host and run the businesses on WPMaven, we use the companies below. Each one processes personal data for us to provide its part of WPMaven. Where a company may also use data for its own purposes, the table says so.
Companies that process personal data for us
| Company | What it does for WPMaven | Personal data it processes | Where | Transfer safeguard |
|---|---|---|---|---|
| Google Cloud Platform | Runs the WPMaven application and its database, the websites we host, file storage, website backups, secrets, operational logs, and the analytics tool we operate ourselves. | Everything stored in WPMaven, including your websites' databases (your customers, orders and form entries), your files and your backups. | European Union (Belgium). Operational logs are kept in the provider's logging service, which is not tied to a region. | Data stored in the EU. Any access from outside the EU is covered by the Standard Contractual Clauses in Google Cloud's data processing terms. |
| Google (Gemini) | AI models that write text, create images and voice-overs, make premium videos, read the numbers from your connected channels, and search the web for research. | What you and your team write, as written; your conversations with your team, including voice notes and photos you send on WhatsApp; the data from your connected channels that your team works with; your website's content and images. | United States, and other countries where Google operates. | Standard Contractual Clauses, as our Privacy Policy states. |
| Amazon Web Services (Amazon SES) | Delivers the emails WPMaven sends you (sign-in codes, approvals, reports, billing notices) and the emails your hosted website sends (order confirmations, password resets, form notifications, booking and cart emails), and reports bounces back to us. | Recipient names and email addresses, including your own customers', and the content of each email. | United States (N. Virginia). | Standard Contractual Clauses in AWS's data processing terms. |
| Cloudflare | The edge network in front of every website we host: delivers pages, absorbs attacks and routes your domain. Also manages DNS for domains connected through WPMaven, forwards email sent to your professional addresses to your inbox, serves videos and images from our media address, and runs the bot check when you start building a site. | Your visitors' IP addresses and requests, email sent to your professional addresses and the inbox it goes to, and the signals the bot check reads. | Worldwide network, including outside the EU. | Standard Contractual Clauses in Cloudflare's data processing terms. |
| Stripe | Payments: checkout, subscriptions, invoices, tax calculation and the billing portal. Stripe also acts on its own account for purposes such as fraud prevention and financial regulation, under its own privacy policy. | Your name, email, billing address, tax ID, payment details and invoices. We never see your full card number. | Worldwide. | Standard Contractual Clauses in Stripe's data processing terms. |
| Meta (WhatsApp Business Platform) | Carries your conversation with your team on WhatsApp: approvals, weekly reports, replies, voice notes and photos. | Your phone number and WhatsApp name, and the messages, voice notes and photos you exchange with your team, which can quote your customers' comments or messages. | Worldwide (Meta's data centers). | Standard Contractual Clauses in Meta's WhatsApp Business data processing terms. |
| fal (Features & Labels, Inc.) | Turns still images into short video clips for the videos your team makes. | The images used in a clip (your products and premises, and people if your photos show them) and the instructions for each clip. Its terms let it use de-identified data to improve its services. | United States, and other countries where it operates. | Standard Contractual Clauses (Module 2) in fal's data processing addendum. |
| Spaceship | Registers, renews and transfers the domains you buy through WPMaven. | The registrant details a domain registration requires: name, organization, postal address, email and phone. | United States. | Not yet confirmed. |
| Zoho (Zoho Mail) | Hosts our email: the mailboxes at wpmaven.ai (support, privacy, legal and the others), which also receive the messages sent through the contact form on this website, and our staff mailboxes, which receive operational alerts. | The emails you send us and anything in them; staff alerts, which can include a customer's email address and the details of a task that failed. | European Union (Netherlands and Ireland) for wpmaven.ai addresses; United States for staff mailboxes. | EU storage for wpmaven.ai addresses; Standard Contractual Clauses in Zoho's data processing terms for staff mailboxes. |
| Crisp | The live chat with our team. On wpmaven.ai it loads only after you accept cookies. In your dashboard and while you build your business, it loads only when you open the chat, and on your later visits once you have used it, so our replies reach you. | The messages you send in the chat and the details you give in them, and your browser information. When you are signed in, also your name, email address, account and plan, so we know who we are talking to. | European Union (Netherlands). | Data stored in the EU. |
The networks you connect are not on this list
When you connect Facebook, Instagram, X, LinkedIn, TikTok, YouTube, Pinterest or Google Business Profile, you connect your own account, and we publish only what you approve. Those networks receive your posts because you ask us to send them there, and they handle them under their own terms with you. The Privacy Policy explains what we read from each one.
Transfers outside the European Union
The table gives the safeguard for each company that processes personal data outside the European Economic Area. We have not yet completed transfer impact assessments for them.
Questions
Write to privacy@wpmaven.ai. To sign our Data Processing Agreement, write to legal@wpmaven.ai.