Subprocessors
Last updated: October 21, 2026
What this list is
A subprocessor is a third party that Pleezpay engages to process personal data on behalf of its customers while delivering the Pleezpay service. Pleezpay engages the vendors below to deliver the service. Each one processes personal data only for the purpose stated here and under a written agreement that includes data protection terms. This list is updated when a subprocessor is added or replaced. Customers with a signed Data Processing Agreement are notified of changes as set out in that agreement. See the Data Processing Agreement page.
1. Infrastructure and platform subprocessors
These vendors host or support the platform for every customer.
| Subprocessor | Purpose | Categories of data | Location |
|---|---|---|---|
| Railway | Hosting for the platform API and background workers, the hosted payment page, the merchant dashboard, developer documentation, and this website. Managed PostgreSQL databases and S3 compatible object storage for the internal file library. | Service data Pleezpay stores, including merchant account and user records, payment session and transaction records, webhook, audit, and support records, and application details. | Railway regions configured for the Pleezpay project. The internal file store is in Railway’s Amsterdam (EU West) region. |
| Cloudflare | DNS, TLS, content delivery, and proxying of web and API traffic to Pleezpay’s hosts. Email routing for the pleezpay.com domain. | IP addresses, request and connection metadata, and the content of traffic passing through its network. Mail addressed to pleezpay.com addresses. | Global edge network. |
| Proton | Business mailboxes, including the contact address on this page. | Correspondence with customers, partners, payers, and vendors, and any attachments they send. | Switzerland. Proton AG is domiciled in Geneva and operates under Swiss law. |
| Resend | Transactional email: notifications for website inquiries and applications, subscription confirmations, application decision emails, account invitation and password emails, and pay link emails sent on behalf of a connected store. | Recipient email address and name, order or application references, and the message content. | European Union. Sending is configured in Resend’s EU region in Ireland. |
Tools that do not process customer personal data, such as source code hosting and build tooling, are not listed.
2. Connected payment providers
Pleezpay is the orchestration layer between a merchant checkout and connected payment providers. Payment processing, acquiring, safeguarding, and settlement are performed by those providers under their own terms, regulatory permissions, and merchant onboarding decisions. The providers named publicly on this website are PayPal, Stripe, Airwallex, Mollie, Ziina, and Viva.com. Which providers handle a given customer’s payments depends on that customer’s configuration and agreement. Additional acquirers and payment service providers used for a customer’s traffic are disclosed to that customer in their agreement.
Card data entered on the hosted payment page is transmitted to the connected provider that processes the payment. Where a provider mounts its own card fields on the page, the card number is entered in that provider’s fields and sent to that provider directly. Payer details needed to process and screen a payment, such as name, email address, phone number, billing address, IP address, and browser details, together with the order amount and reference, are shared with the provider handling that payment. See the Integrations page for current availability.
3. Merchant systems
A merchant’s own store platform, such as WooCommerce, sends order details to Pleezpay at the merchant’s instruction and receives order and payment status back. The Pleezpay plugin for WooCommerce sends the order reference, amounts, items, and the customer’s name, email address, phone number, and billing and shipping address. These systems are chosen, configured, and controlled by the merchant. They are not Pleezpay subprocessors, and the merchant’s own agreements with those platforms apply.
4. Analytics and website tools
- Google Tag Manager and Google Analytics (Google): used on the marketing pages of this website only. They stay off until you accept analytics and are never loaded on the hosted payment page. When enabled, Google receives online identifiers, device and browser details, approximate location derived from IP address, pages viewed, and interactions, as described in the Cookie Notice.
5. International transfers
Pleezpay is established in the United States, and some subprocessors process data in the United States or other countries. Where personal data of residents of the European Union, the United Kingdom, or Switzerland is transferred, the transfer relies on standard contractual clauses or another recognised transfer mechanism, as set out in the Data Processing Agreement.
6. Notice of changes and questions
To receive notice of subprocessor changes, or to ask about a vendor on this list, email [email protected] with “Subprocessor notice” in the subject. Customers with a signed Data Processing Agreement receive notice through the channel and within the period set out there. Related information: the Privacy Notice and the Security & Trust page.