Sub-processors
These are the third parties that process data on our behalf in order to deliver JustEmails. This page mirrors the sub-processor schedule in our Data Processing Addendum and is published separately so you can check it without re-reading the agreement.
1. Current sub-processors
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Railway | Application hosting and database | Account data, email metadata, message content in transit | United States |
| DigitalOcean | Mail servers and object storage | Message content and attachments at rest, mailbox data | United States |
| Cloudflare | DNS, bot protection on sign-in forms | IP address, request metadata | Global edge network |
| Stripe | Payment processing and subscription billing | Billing name, email, payment method (held by Stripe, not by us) | United States |
| Resend | Transactional email from the platform itself | Recipient address and message content of our own notifications | United States |
| JustAnalytics | First-party website analytics and error monitoring | Visitor identifier, page URL, browser and device metadata | United States |
| Twilio | SMS for two-factor authentication and phone verification | Phone number, verification code | United States |
| Postmaster Tools for deliverability reporting; migration from Google Workspace when a customer initiates it | Aggregate deliverability statistics; mailbox content during a migration the customer starts | United States | |
| Microsoft | SNDS for deliverability reporting; migration from Microsoft 365 when a customer initiates it | Aggregate deliverability statistics; mailbox content during a migration the customer starts | United States |
2. Changes to this list
We give 30 days’ notice before adding a new sub-processor or replacing an existing one. Notice is given by updating this page and emailing the account owner.
If you object to a new sub-processor on reasonable data-protection grounds, tell us within the notice period and we will work with you to find an alternative. If we cannot, you may terminate the affected part of the Service without penalty. The full objection process is set out in our Data Processing Addendum, which governs if this page and the DPA ever disagree.
3. What is not on this list
Providers we use for our own internal operations, that do not process customer personal data, are not sub-processors and are not listed here.
A customer’s own choices are also not sub-processing by us. If you connect an external mailbox or start a migration from another provider, that provider processes your data under your relationship with them, not ours.
4. Contact
Questions about this list, or to be notified of changes, email privacy@justemails.app.