Subprocessors

01What a subprocessor is

A subprocessor is a third party that processes customer data on our behalf in order for us to provide PixyScan. Each is bound by contract to process data only on our instructions and to security terms no less protective than our own.

We publish changes here before a new subprocessor begins processing customer data. Under the Data Processing Addendum you may object on reasonable data protection grounds.

02Infrastructure

Amazon Web Services provides the compute and object storage the application runs on, including the storage of generated reports and exports. Customer data is hosted in the European Union (Frankfurt, Germany).

03Email delivery

Transactional email - signup codes, password resets, workspace invitations and billing notices - is delivered by {EMAIL_PROVIDER}. It receives the recipient's email address and the contents of the message. No scan data is sent by email.

04Payments

Subscription payments are processed by {PAYMENT_GATEWAY}. Card details are entered on their systems and are never received or stored by us; we hold only the subscription status, the subscription tier, and the invoice records we are required to keep.

05Google, if you connect Search Console

When someone connects Google Search Console to a site, PixyScan reads that site's search performance data from Google, with read-only access the connecting person grants. Google is the source of that data rather than a processor working for us: we send it only the requests that read the data - which property, which dates and any page or query filter - and it sends the data back.

How we handle what we receive, how long we keep it and how to revoke access are set out in the Google user data section of the Privacy Policy. If no site is connected, nothing is exchanged with Google for this feature.

06Values still to be confirmed

Two entries above are shown as placeholders. Both are configured per deployment rather than named in the source, and publishing a plausible guess for a subprocessor would be worse than admitting the gap - a customer's data protection officer is entitled to rely on this page.

If you need the current values before this page is finalised, email privacy@pixyscan.com and we will confirm them in writing.

07What we do not use

We use no third-party advertising networks, no cross-site tracking providers, and no data brokers. We do not sell or share customer data with anyone for their own purposes.