Subprocessors
The companies that receive personal data so that LGPD works: why, which data and in which country.
Servers we operate
- Purpose: operate shared services and visit analysis.
- Data: the data described in this privacy policy.
- Country: Brazil; a backup copy of account, organization registry and billing data in Europe (Germany); the copy of visit data kept for analysis, without IP or account, in Europe.
Amazon Web Services (Amazon SES)
- Purpose: deliver account messages.
- Data: recipient address and message.
- Country: Brazil (São Paulo).
Google (sign-in)
- Purpose: sign-in with a Google account, when you choose it.
- Data: the name, e-mail and photo of the Google account, which Google sends us.
- Country: United States.
Asaas Gestão Financeira Instituição de Pagamentos S.A.
- Purpose: payments in Brazilian reais (Pix, boleto and card).
- Data: the payer's name, CPF or CNPJ and e-mail; for cards, the card details, postal code, address number, phone and IP address.
- Country: Brazil.
Stripe
- Purpose: card payments from outside Brazil, in US dollars.
- Data: the e-mail, billing address and card details, typed on Stripe's page; from us, the amount, the product and the charge code.
- Country: United States.
Coinbase Developer Platform (CDP)
- Purpose: verify and settle x402 payments on the Base network.
- Data: the wallet address, amount, signed authorization and paid route.
- Country: United States.
Amazon Web Services (AWS)
- Purpose: host the production LGPD application, store its daily backup copy and provide domain DNS through Amazon Route 53.
- Data: application data described in this policy; DNS receives no account or application usage data.
- Country: Brazil (São Paulo), for the application and its backup copy.
Changes to this list
A new subprocessor enters this list in the same product version that starts to use it.
Last updated: 13 November 2026.