Legal
Meskora Sub-processors and Payment Providers
Version 1.0 · Effective date: 1 November 2026
This register identifies providers used in delivering the Meskora Service. A provider is a sub-processor only to the extent it processes Customer Personal Data on Meskora's behalf. Changes to sub-processors are governed by the DPA.
| Provider | Purpose | Processing / location information |
|---|---|---|
| Cloudflare | Website/application proxy, content delivery, security | Traffic data and data in transit; global network |
| SMTP2GO | Transactional email delivery | Addresses, message content; hosting/transfer locations subject to provider arrangements |
| Amazon Web Services (S3) | Encrypted backups | Backup storage in London (eu-west-2) |
| Expo | Push notification relay | Push tokens and notification text; international processing may occur |
| Apple Push Notification service; Google Firebase Cloud Messaging | Delivery of mobile push notifications | Tokens and notification text; international processing may occur |
Production systems run on Meskora's own hardware in the United Kingdom; no hosting or colocation provider processes Customer Personal Data.
Other providers. Google Workspace handles Meskora's staff and inbound business email and the appointment booking page for walkthroughs (Google Calendar appointment scheduling). Booking details are Meskora's own sales records, not Customer Personal Data. Google Workspace's role as a sub-processor depends on whether Customer Personal Data is processed on behalf of customers in those emails.
Independent merchant of record (not a Customer Content sub-processor for ordinary subscriptions): Paddle. The applicable Paddle legal entity is identified at checkout. Paddle handles payment, billing, fraud prevention, tax administration and refunds as an independent controller. Its privacy notice is https://www.paddle.com/legal/privacy. Customer Content is not intentionally sent to Paddle for ordinary subscription processing.
For questions or objections under the DPA, contact privacy@meskora.com. Meskora will notify customers at least 30 days in advance of material sub-processor additions or replacements, subject to the DPA.