These documents are drafts pending legal review and are not legal advice. Bracketed [values] are placeholders to be completed before launch.

Sub-processors

Last updated: [DATE]

JES WEB PTY LTD uses the third-party providers below ("sub-processors") to help deliver CardIndexer (the "Service"). We require sub-processors to protect personal information consistently with our Privacy Policy. Locations and vendors may change; we will keep this page current.

| Sub-processor | Purpose | Data processed | Location | | --- | --- | --- | --- | | Vercel | Application hosting & delivery | Account, usage, log data | United States | | Neon | Managed PostgreSQL database | Account data, card metadata, usage records | [Region] | | Clerk | Authentication & user/organisation management | Name, email, auth identifiers | United States | | Stripe | Subscription billing & payments | Billing details, payment metadata | United States | | [Email provider] | Transactional email (e.g. alerts, receipts) | Name, email | [Region] |

We do not share full card numbers with any sub-processor, because we never collect them.

Changes and notice

We may add or replace sub-processors as the Service evolves. Where required by an applicable data processing agreement, we will provide notice of changes. For questions, contact [privacy@cardindexer.com].