Sub-processors
The third-party providers Gapfy uses to deliver its Services, the data they handle, where they process it and the transfer safeguards that apply.
Last updated: 14 June 2026
Gapfy uses the sub-processors below to provide its Services. Each is engaged under a data-processing agreement with obligations no less protective than our own. This page is referenced by our Data Processing Agreement and Privacy policy.
Infrastructure and platform sub-processors
| Provider | Purpose | Data handled | Location | Transfer safeguard |
|---|---|---|---|---|
| Microsoft (Azure) | Cloud hosting - compute, databases, storage, messaging and cache. | All account and Customer Data. | European Union (West Europe) | Within the EEA |
| Microsoft (Entra External ID) | Identity and authentication. | Account identifier, email, name. | European Union | Within the EEA |
| Microsoft (Azure Communication Services) | Transactional email (notifications, invites). | Recipient email and message content. | European Union | Within the EEA |
| Stripe | Payment processing and subscription billing. | Billing and payment data. | European Union / United States | Standard Contractual Clauses |
| Twilio | SMS delivery (verification and notifications, where used). | Phone number and message content. | United States | Standard Contractual Clauses |
| Cloudflare | Bot and abuse protection (Turnstile), DNS and edge delivery. | IP address and request metadata. | Global (EU edge where available) | Standard Contractual Clauses |
Other third-party technologies
The following third parties are not engaged as sub-processors of Customer Data, but receive limited data when you use certain surfaces, and we list them for transparency:
- Google Fonts - delivers the website fonts; receives your IP address when a page loads.
- DuckDuckGo - used by Harmony and Riff to fetch website icons (favicons); receives the domain of the site whose icon is requested.
- Google (Chrome Web Store) - distributes the Harmony browser extension; Google acts as an independent controller of store interactions under its own terms.
Changes
We update this list when we add, replace or remove a sub-processor. Customers under a Data Processing Agreement receive advance notice of changes as described in that agreement.
This English-language version is the authoritative, legally binding version of this document. Translations are provided for convenience only.