Draft: pending legal review. This document is not yet final or legally binding. It will be reviewed by counsel before launch.
Sub-processors
Last updated: 28 October 2026
These terms are provided by Studio 404 d.o.o., Gradišče 15c, 1360 Vrhnika, Slovenia, EU, VAT ID SI42531357 ("SpacePost", "we", "us"), contact: legal@spacepost.dev.
We use the following sub-processors to provide the Service. We will update this page at least 30 days before adding or replacing a sub-processor that processes Customer Data; see the DPA.
| Sub-processor | Purpose | Data | Location |
|---|---|---|---|
| Amazon Web Services EMEA SARL (Amazon SES, SNS, SQS) | Sending email and receiving delivery events | Message content, recipient addresses, delivery events | Germany (eu-central-1, Frankfurt) |
| Stripe Payments Europe, Ltd. | Payment processing and billing | Billing contact, plan and payment data (card data is handled by Stripe) | EU / United States |
| Railway Corporation | Application hosting and database | All Customer Data stored by the application | Netherlands (Railway EU region, Amsterdam) |
GitHub sign-in (optional)
If you choose to sign in with GitHub, GitHub, Inc. (a Microsoft company, United States) authenticates you and shares your public profile and primary email address with us through OAuth. GitHub acts as an independent controller for your GitHub account; we do not receive access to your repositories. This is optional: you can sign in with email instead.
Notes
- Cloudflare, Inc. (United States, global network) runs our DNS, hosts the marketing site and documentation, runs the Turnstile bot check on sign-up and sign-in, and forwards mail sent to our own addresses (such as support@spacepost.dev). It sees web traffic (IP address, browser signals) and the mail you send us, but no Customer Data; this is covered by our privacy policy.
- Subscribe to changes by writing to privacy@spacepost.dev.