Version: 2026-10-12
Effective date: 2026-10-12
This list distinguishes our service subprocessors from providers acting as independent controllers. It supports the Privacy Notice and Data Processing Addendum.
Providers Identified in the Product
| Provider | Role and purpose | Data | Processing location and transfer information |
|---|---|---|---|
| Amazon Web Services — account-listed service provider: AWS Turkey Pazarlama Teknoloji ve Danışmanlık Hizmetleri Limited Şirketi | Application hosting, account authentication, data storage, background processing, operational logging and database recovery | Account identifiers, workspace records, memberships, metadata, billing events, operational logs; content where needed for service processing | Application hosting, authentication and inspected database backups are in Frankfurt, Germany. AWS also provides account verification email delivery. Provider access and onward processing are subject to the applicable agreements. Account-specific Turkish transfer documents have been received; their signatures remain pending. Information about applicable processing terms and safeguards is available from legal@jestersbox.com. |
| Cloudflare, Inc. | Storage of private cloud workspace assets and previews | Files, previews, versions and object/request metadata | Our Cloudflare storage is configured for Eastern Europe (EEUR) with default jurisdiction; this is not a guarantee that all processing occurs only in the EU. Processing is governed by the Cloudflare Customer Data Processing Addendum, including its applicable international-transfer provisions. Information about applicable safeguards is available from legal@jestersbox.com. |
| Paddle — seller entity shown at checkout/receipt | Merchant of record/reseller and independent controller for buyer processing; not simply a content subprocessor | Buyer, payment, tax, fraud, invoice and subscription data; Jesters’ Box receives relevant transaction and entitlement records | See Paddle Privacy Notice and Buyer Terms. The actual seller is identified at checkout and on the receipt. |
Other service providers
- Google Workspace hosts support@jestersbox.com and legal@jestersbox.com for customer support and legal correspondence. We also use private Google Drive/Sheets records to track support cleanup, privacy requests and security incidents, and Google Calendar for internal review reminders. Data includes sender/recipient details, message contents, attachments, related email metadata and the limited case references, dates, status and action records needed for these workflows. Google acts as a processor for this content; where it contains customer workspace personal data processed on a customer's behalf, Google acts as a subprocessor for that processing. Google's Cloud Data Processing Addendum describes the applicable processing terms. Subject to applicable contractual data-location and transfer commitments, data may be processed in countries where Google or its subprocessors maintain facilities; this entry does not promise EU-only processing.
Our administration and support are currently performed from Türkiye. Provider personnel and onward processing may involve other countries as identified in applicable provider arrangements. Providers used for our own account administration or business communications are not automatically subprocessors for every customer workspace.
Business customer notices
For covered processing, new or replacement subprocessors are notified by email to the workspace owner or designated business contact at least 30 days before use. Reasonable data-protection objections may be sent to legal@jestersbox.com within 15 days of notice. The Data Processing Addendum explains resolution, termination and urgent-change handling.