Subprocessors
Subprocessors
Version 1.0, effective October 19, 2026
A subprocessor is a company we use to run SEODash that may process personal data on our behalf, including our customers' Search Console and GA4 data. Each one is bound by a written data processing agreement, and we remain responsible for the work they do for us. Our Data Processing Addendum and Privacy notice explain how this fits together.
Current subprocessors
| Subprocessor | What it does for SEODash | Data it handles | Where | Transfer safeguard |
|---|---|---|---|---|
| Cloudflare, Inc. (United States) | Hosts the website, app and API; our main database (D1), cache (KV), file storage (R2) and job queues; renders pages for reports and Page Memory; checks sign-ins with Turnstile; sends service email. | All account data, property data and content. | Global network. The main database and the archive backups are kept in the EU. | EU-US Data Privacy Framework and UK Extension; EU Standard Contractual Clauses with the UK Addendum. |
| Google LLC and its affiliates (Google Cloud) | Stores the Search Console and GA4 archive (BigQuery) and prepares its backups (Cloud Storage). Runs our AI features with Gemini models (Vertex AI). | Property data; for AI features, property data and the text you type into them. | BigQuery and Cloud Storage: EU. Gemini: Google's global endpoint, which may process in the United States. | Google Cloud data processing terms; EU-US Data Privacy Framework and UK Extension; EU Standard Contractual Clauses with the UK Addendum. |
| Stripe, Inc. and its affiliates | Takes payments and runs subscriptions, invoices and the billing portal. | Name, email address, billing address, payment details, VAT number, subscription history. | United States and other countries where Stripe operates. | EU-US Data Privacy Framework and UK Extension; EU Standard Contractual Clauses with the UK Addendum. |
| Functional Software, Inc., trading as Sentry (United States) | Collects error reports so we can fix problems. | Technical data about errors, scrubbed of personal details before sending. | Stored in the EU (Germany). | EU-US Data Privacy Framework and UK Extension; EU Standard Contractual Clauses with the UK Addendum. |
| DataForSEO OÜ (Estonia) | Supplies keyword, search result and backlink data, and runs AI Visibility prompts in ChatGPT, Gemini, Google AI Mode and AI Overviews on our behalf. Only used when you use those features. | Keywords, domains, prompts, and brand and competitor names. | EU, and the countries of the AI services it queries. | Processing in the EU; its own onward transfers under the EU Standard Contractual Clauses. |
| Zoho Corporation | Runs our support and privacy mailboxes. | Your messages to us and your email address. | The Zoho data center for our account. | Zoho data processing agreement; EU Standard Contractual Clauses with the UK Addendum where data leaves the UK or EU. |
Being retired
We are moving off these providers. Each one keeps doing the work below until the move is complete, and we remove it from this list once no personal data remains with it.
| Subprocessor | What it does for SEODash | Data it handles | Where |
|---|---|---|---|
| Supabase, Inc. (United States) | Sign-in and our main database, until they move to Cloudflare. | Account data and SEODash content. | London, United Kingdom. |
| Resend, Inc. (United States) | Sends service email, until it moves to Cloudflare. | Email addresses and email content. | United States. |
Not subprocessors
- Google, as the provider of Google sign-in, Search Console and Google Analytics. You connect these services yourself and Google acts under its own terms.
- The people and tools you choose to share with, such as report recipients and the endpoints of your webhooks, API and MCP clients.
- Our website analytics and advertising tools, which only see visits to seodash.com, and only with your consent. See the Cookie policy .
Our own staff and contractors who help run SEODash work under written confidentiality and data protection obligations.
Changes to this list
We give at least 30 days' notice before a new subprocessor starts processing customer personal data, by updating this page and emailing the address on each account. A business customer can object as the Data Processing Addendum describes. Questions: privacy@seodash.com .