Subprocessor List

payments, subscriptions, and the billing portal. Receives account email address, billing identifiers, and the payment details the user enters with Stripe. Card details are handled by Stripe and are not stored by Win Backlinks.

email. Always used for transactional product email such as sign-in, account, and notification messages, and it receives the recipient address and the message content. Where outbound sending is enabled for an account, it also reports delivery events, which carry recipient addresses, bounces, and complaints. Where inbound receiving is enabled, replies addressed to the service are retrieved from Resend, including the full message body, headers, and any quoted history.

product analytics. Receives usage events and the account identifiers needed to attribute them.

error monitoring. Receives error diagnostics, which may incidentally include account identifiers.

backlink and page research data. Receives the domains and URLs submitted for research.

the AI models used to score relevance and prepare drafts. Receives the target and candidate page material needed for the requested score or draft. Another model provider is used only if it is expressly configured, and this list is updated before that happens.

R2 object storage for private application media and encrypted nightly backups. Application media may contain user-uploaded content; backup files are encrypted with keys Cloudflare does not hold. The selected storage location and any jurisdiction setting are recorded in the operational policy register.

hosts the application and managed PostgreSQL database in Singapore and processes service and account data while hosting is enabled. Hetzner is a possible future host and will be added to this list before it begins processing personal data. Container images are held in a private registry that receives no customer personal data.