Subprocessors
Last updated: May 9, 2026
Proxylang relies on the third-party processors below to deliver the Service. Each processor is bound by a written agreement with us and processes data only on documented instructions, in accordance with GDPR Article 28.
We notify customers of any new subprocessor at least 30 days before granting it access to customer data, by email and by updating this page. If you object to a new subprocessor, you may terminate the affected service before the change takes effect.
Infrastructure
| Processor | Role | Data Categories | Region | Safeguards |
|---|---|---|---|---|
| Cloudflare, Inc. | Edge proxy, CDN, DDoS, Workers, KV | Request URL, headers, geo (country/region/city), translated HTML, cache | Global edge | SCCs, DPA |
| Supabase Inc. | Authentication, Postgres database | Account email, name, OAuth provider, hashed identifiers, domain config | AWS ap-southeast-2 (Australia) | SCCs, DPA |
| Railway Corporation | Application hosting (proxylang.dev) | All request and account data in transit | United States | SCCs, DPA |
AI Translation Providers
Source text is sent to the providers below for translation only. PII is detected and redacted before transmission. None of these providers train models on the content we send them.
| Processor | Role | Data Categories | Region | Safeguards |
|---|---|---|---|---|
| Google LLC | AI translation | PII-redacted source text, language codes | United States, Global | SCCs, DPA |
| Anthropic, PBC | AI translation | PII-redacted source text, language codes | United States | SCCs, DPA |
| OpenAI, L.L.C. | AI translation (fallback) | PII-redacted source text, language codes | United States | SCCs, DPA |
| DeepL SE | AI translation (selected language pairs) | PII-redacted source text, language codes | European Union | EU-resident, DPA |
Payment & Billing
| Processor | Role | Data Categories | Region | Safeguards |
|---|---|---|---|---|
| Polar Software, Inc. | Payment processing (international) | Customer email, subscription state, invoice records | United States | SCCs, DPA |
Communication & Analytics
| Processor | Role | Data Categories | Region | Safeguards |
|---|---|---|---|---|
| Resend, Inc. | Transactional email delivery | Customer email address, message content | United States | SCCs, DPA |
| Umami Software, Inc. | Privacy-focused product analytics for proxylang.dev (consent-gated in GDPR regions) | Page views, referrers (no cross-site tracking, no cookies) | United States | Anonymized, DPA |
| Reddit, Inc. | Conversion tracking (consent-gated in GDPR regions) | Hashed email, conversion events (only after explicit consent) | United States | SCCs, opt-in only |
Contact
Questions about subprocessors, or to receive automatic notifications of changes, email hello@proxylang.dev.