GDPR art. 28 transparency
Subprocessors
Version 1.1 • Last updated: October 22, 2026 • Versión en español
This is a translation provided for convenience. If there is any discrepancy, the Spanish version prevails.
1. We tell customers in advance
Melopo Radar keeps an up-to-date list of the providers involved in running the service. We commit to notifying our customers at least 30 days in advance before adding any new subprocessor with access to technical data from the stores.
2. Providers and subprocessors
| Provider | Location | Purpose | Transfer safeguard |
|---|---|---|---|
| Contabo GmbH | Germany (EU) | Hosting of the VPS, database and check processing | Within the European Economic Area |
| Resend, Inc. | United States | Sending transactional emails and downtime alerts to users | Standard Contractual Clauses (SCC) + Data Privacy Framework |
| Sendinblue SAS (Brevo) | France (EU) | Sending news and offers to users who agreed to receive them | Within the European Economic Area |
| Freemius, Inc. | United States | Merchant of Record (MoR), subscription billing and taxes (acts as an independent controller for billing) | Freemius terms and Data Privacy Framework |
| OpenAI, L.L.C. | United States | Processing drafts for the "AI Content" add-on (product data only, no customer data) | Standard Contractual Clauses (SCC) |
| Functional Software, Inc. (Sentry) | United States | Recording application errors so we can fix them (technical data of the failed request) | Standard Contractual Clauses (SCC) + Data Privacy Framework |
| Cloudflare, Inc. | United States / EU | Content delivery network (CDN), DDoS mitigation and WAF protection | Standard Contractual Clauses (SCC) |
Version history
- 10/22/2026: Version 1.1: Brevo and Sentry added.
- 09/28/2026: Version 1.0 (first publication).