Subprocessors
Every company that can touch service data, and what each one touches.
| Provider | Purpose | Data it can touch | Where |
|---|---|---|---|
| Oracle Cloud Infrastructure | hosting the application, database, file storage and our mail server | everything the service stores and the email it sends | London, United Kingdom |
| Cloudflare | DNS for palt.io, and proxying and caching the project subdomains your docs are served on | hostnames, connection metadata, and docs pages served through it | global |
| Polar | payments, as merchant of record | billing identity and transaction data | EU/US |
| UploadThing | storing images uploaded in the page editor | the files you upload | US |
| OpenAI | AI actions: drafting docs, improving pages, describing MCP tools, the MCP playground | the content an AI action is asked to work on | US |
Signing in with GitHub or Google shares your name, email and avatar with us from that provider; they act on their own account, not as our subprocessors. Changes to this list are announced with notice under the Data processing addendum. Questions: hello@palt.io.