Third-Party Partners
We collaborate with carefully vetted third-party providers to deliver an enhanced experience. Below are the partners we work with and the data they handle.
SecurePay (Payment Processing)
- Handles credit card transactions securely via PCI-compliant infrastructure.
- Never stores raw card data—tokens replace sensitive information after authorization.
- Data retention policy: Card tokens deleted 30 days post-transaction (recurring payments exempt).
CloudScale (Infrastructure)
- Deploys global edge nodes for low-latency API delivery and CDN services.
- Monitors infrastructure health metrics (CPU, memory, network) through shared dashboards.
- Access logs retained for 60 days for operational troubleshooting.
InsightAI (Analytics)
- Collects anonymized user behavior data (click paths, session duration, feature usage).
- Generates monthly analytics reports for product improvements—no individual data included.
- Uses differential privacy techniques to ensure unidentifiability of data sources.
AuthShield (Authentication)
- Manages multi-factor authentication (SMS, app-based, biometric).
- Stores encrypted login attempt history for fraud detection.
- Session keys rotated every 48 hours for enhanced security.
Data Governance
Our Commitment
We maintain SOC2 Type II compliance with annual third-party audits. All partners must sign Data Processing Agreements guaranteeing GDPR, CCPA, and ISO 27001 alignment. Data transfers across borders require explicit user consent and are encrypted in transit.
Your Rights
- Right to view third-party data processing agreements
- Right to request data removal from partner systems
- Right to object to data sharing for analytics
- Right to access privacy impact assessments
Questions About Partners?
Want detailed documentation or need to request a data audit?
🚀 Contact Legal Team