Last updated: 4 August 2026
These are the third parties that may process data on our behalf when you use EasyWeb.AI. The list is deliberately short, and published so you can see exactly who is involved.
Everything else — your account, your access grants and your encrypted GitHub token — is held on our own self-hosted infrastructure and is not sent to any third party.
Current subprocessors
| Service | What it does | Data it receives |
|---|---|---|
| GitHub, Inc. (Microsoft) |
Holds the repositories the service manages. Every read, edit and commit is an API call to GitHub. | Your repository contents, commit messages and authorship, plus the API requests made with your token. GitHub already holds this data as your own account provider; the service acts on it rather than copying it. |
| Cloudflare, Inc. | Delivers all traffic, provides HTTPS certificates, the network tunnel, and bot protection. | IP address, requested URLs, browser user agent and connection metadata for every visit, plus interaction signals used to tell people from bots. |
| Mailgun (Sinch) |
Delivers service email — account activation, password resets and notifications. | Recipient email address and the contents of the message sent. |
| Automattic, Inc. (Gravatar) |
Supplies profile images where that feature is enabled. | A cryptographic hash of the email address, plus the visitor’s IP address as part of the image request. |
| WordPress.org | Provides software, theme and plugin updates. | Site URL and version numbers. No personal data about users. |
A note on GitHub
GitHub is unusual in this list. It is not somewhere we send your data for our own convenience — it is where your repositories already live, and the whole purpose of the service is to act there on your behalf. Your relationship with GitHub, and their terms and privacy policy, apply to your repositories exactly as they did before.
What changes is that this service holds a token able to act on your account. That is described in detail in section 3 of our privacy policy.
Backups
Backups of the service are taken. Where they are stored only on hardware we control, no third party is involved. If off-site backup storage is introduced, that provider will be added to this list before it is used.
International transfers
Several of these providers operate globally, so data may be processed outside your own country. Where required, transfers rely on the safeguards those providers offer, such as Standard Contractual Clauses.
Changes
This page is updated before a new subprocessor is added. Where a change materially affects how your data is handled, registered users are notified by email.
Questions
See our contact page.