Sub-processors
Who we share information with
Last updated: 4 September 2026
This list forms part of our Privacy Policy. It names every third party ("sub-processor") that may process personal data on our behalf, what they do for us, what they can see, and where they operate. Only sub-processors we currently use and have disclosed appear below.
Hosting
Hosting sub-processors
| Name |
Purpose |
Data |
Region |
Policy |
| Hostinger |
Sends outgoing email for the contact and application forms (SMTP), and hosts preview builds of client websites before they go live. |
Contact-form and application content, in transit only, for email delivery. Preview site files contain no applicant personal data. |
EU (Hostinger) — confirm exact datacenter |
Privacy policy |
Database
Database sub-processors
| Name |
Purpose |
Data |
Region |
Policy |
| Supabase |
Database and file storage for Free Build applications — application records, content briefs, and uploaded photo/logo files. |
Name, email, phone, business details and your written brief answers; uploaded photo/logo files. A video is stored only as a link — we do not download or store the video file itself. |
Sydney, Australia (ap-southeast-2) |
Privacy policy |
Support
Support sub-processors
| Name |
Purpose |
Data |
Region |
Policy |
| Zendesk |
Support ticketing — a ticket is created for each Free Build application so our team can track and respond to it. |
Applicant name, email, business name, region, industry, existing website, video link, and your written answers from the application form. |
United States (Zendesk) — confirm account data-residency pod |
Privacy policy |
Analytics
Analytics sub-processors
| Name |
Purpose |
Data |
Region |
Policy |
| PostHog |
Server-side product analytics — records form submissions, outcomes and pipeline progress so we can see how the site and application process are performing. |
A pseudonymous identifier derived from your IP address, plus event properties such as form type, region/industry and outcome. Never your name, email, phone number, or message/application content. |
EU (Frankfurt, Germany — eu.i.posthog.com) |
Privacy policy |
Security
Security sub-processors
| Name |
Purpose |
Data |
Region |
Policy |
| Cloudflare |
Bot protection (Cloudflare Turnstile) on our forms, and edge network / CDN proxying for this website. |
Turnstile: browser/device signals and interaction data used to verify you are a real person. CDN/proxy: your IP address and requests, in the course of serving the site. |
Global edge network (Cloudflare) |
Privacy policy |
Fonts
Fonts sub-processors
| Name |
Purpose |
Data |
Region |
Policy |
| Google Fonts |
Serves the web fonts used on this site. |
Your IP address and browser information, as part of the standard web request to load a font file. |
Global (Google) |
Privacy policy |
Changes
When we add, remove or change a sub-processor, we update this page and the "Last updated" date above. We do not maintain a separate mailing list for this page — please check back, or ask us directly.
Questions
If you have questions about any entry on this list, or want to know more about how a specific sub-processor handles your information, email us at contact@webisto.tech.