المعالِجون الفرعيون

We use a small number of third parties to run the platform. This page lists them by category, with what each one does and what data reaches it. It is maintained so that a merchant can assess the chain before agreeing to it.

Why some entries are categories rather than names

Our issuing partners are named under commercial agreements that restrict disclosure, and the identity of the institution behind a card programme is not something we publish. That is a deliberate, contractual position rather than an oversight.

Merchants who need the specific identities — for their own regulatory assessment, or for a due diligence questionnaire — can request them under a non-disclosure agreement through the contact form. We will not publish them here.

Current sub-processors

What is deliberately absent

• No analytics provider. The public site runs none, and there is no product analytics vendor receiving usage data.
• No advertising or marketing platform receives personal data from us.
• No customer support or chat vendor — the contact form writes to our own database and emails our own inbox.
• No content delivery network serves this site's fonts, scripts or images. Everything is first-party.

Obligations we impose

Each sub-processor is engaged under terms requiring confidentiality, appropriate security measures, processing only on instruction, and assistance with data subject requests. We assess a new sub-processor before engaging it.

Changes

When we add or replace a sub-processor in a way that affects merchant data, we publish a new version of this page with a new effective date and notify merchants through the portal, so there is a reasonable window to object before the change takes effect.

How we handle personal data generally is described in the Privacy Policy.