Subprocessors
Last changed 7 October 2026 · Version 1.2
These are the third-party services that may process personal data when we provide PriceMyWash. Each one is bound by a data processing agreement with us. This page is Annex III of our Data Processing Addendum.
Get notified of changes. Email privacy@pricemywash.com with the subject "Subprocessor updates" and we will email you at least 14 days before we add or replace a subprocessor. Account owners are notified automatically.
Contents
- Subprocessors
- Not subprocessors: services that act on their own account
- Self-hosted tools
- Change history
Subprocessors
| Subprocessor | Purpose | Data processed | Location | Transfer safeguard |
|---|---|---|---|---|
| Hetzner Online GmbH | Servers, database, backups | All service data, including leads | Germany (EU) | Not needed (EU) |
| Cloudflare, Inc. | DNS, CDN, TLS, attack and bot protection; Turnstile on the quote form; R2 storage for encrypted backups | Traffic in transit (including form submissions); encrypted backups | Global network; R2 bucket in the EU jurisdiction | Data Privacy Framework; SCCs |
| Resend (Plus Five Five, Inc.) | Transactional email: account emails (email confirmation, password reset), lead alerts (contain the homeowner's details), weekly reports | Recipient email address; email content | United States | SCCs |
| Crisp IM SAS | Support chat in your dashboard, loaded only when you click "Chat with us". Never on your website, your price link or the calculator homeowners use | Your name, email and messages, and an identifier Crisp stores in your browser | France (EU) | Not needed (EU) |
| Google LLC (Google Workspace) | Support mailbox | Emails you send us and our replies | United States / global | Data Privacy Framework; SCCs |
| Ahrefs Pte. Ltd. | Website analytics on the marketing pages (Ahrefs Web Analytics) | Page URL, referrer, browser and device type, and a country derived from the IP address. Cookieless: nothing is stored on your device and no cross-site profile is built. Not loaded at all if your browser sends Global Privacy Control or Do Not Track. | Singapore, with EU edge processing | Data Processing Addendum with SCCs |
| PostHog, Inc. | Product analytics inside the signed-in app (PostHog EU Cloud): which pages and features you use, which actions you complete, and — once you sign in — your user id, name and email address. Session recording is off, and it is never loaded on the cookieless quote widget. Not loaded at all if your browser sends Global Privacy Control or Do Not Track. | European Union | Data Processing Addendum with SCCs |
Not subprocessors: services that act on their own account
| Service | Role |
|---|---|
| Armitage Labs OÜ (Creem, Estonia) | Reseller and Merchant of Record for all purchases. Processes payment and billing data as an independent controller under its privacy notice. Replaced Paddle on 2026-10-02. |
| Google LLC (Sign in with Google) | Authenticates you if you choose Google sign-in. |
| Your website builder (WordPress, Wix, Squarespace and others) | Hosts your website, where you install the widget. Your own provider, not ours. |
Self-hosted tools
These run on our own servers at Hetzner in Germany, so no third party receives data through them: Postgres (database), GlitchTip (error tracking), and Grafana/Loki (logs).
Change history
| Date | Change |
|---|---|
| 7 October 2026 | Current version of this list (version 1.2). What changed last is noted in the tables above. For an earlier version, email privacy@pricemywash.com. |