Subprocessors
Effective date: June 13, 2026 · Last updated: June 13, 2026
To provide ObraCraft, DMZ Technology Corp uses the third-party "subprocessors" below to host, store, secure, process payments, send email, and read uploaded documents. We share only the data needed for each provider's function, and we do not sell your data.
To protect the security and proprietary design of the Service, infrastructure providers are identified by function. All providers process data in the United States under agreements that restrict use of your data to providing their service to us. Business customers that require the named provider list (e.g., for a vendor-security review) may request it under a confidentiality agreement at [email protected].
| Provider | Function | Data processed |
|---|---|---|
| Stripe | Payment processing & subscription billing | Billing contact, payment method (held by Stripe — we don't store card numbers), subscription status |
| Cloudflare | CDN/edge, bot protection (Turnstile), and object storage for uploaded files | Network/request data; uploaded files (invoices, photos, attachments, logos) stored under per-organization keys |
| AI document-processing provider (U.S.) | Automated reading/extraction of uploaded invoices & documents | Contents of the documents/photos you upload for parsing. Per the provider's terms, your data is not used to train its models. |
| Cloud application-hosting provider (U.S.) | Application hosting | All Service data in transit; application logs |
| Managed database provider (U.S.) | Database hosting | Your account, catalog, estimates, material lists, and related records |
| Transactional email providers (U.S.) | Email delivery (login codes, security alerts, billing notices, invites, document delivery) | Recipient email address and message contents |
| Google LLC — optional, only if you connect it | Google Calendar sync (Google Calendar API). Off by default; active only after you connect your own Google Account. | Your task/reminder titles, dates and addresses are written to your Google Calendar as events; we read back only the events ObraCraft created. See the Privacy Policy § Google user data. |
The Google Calendar integration is an optional connected service that you authorize for your own Google Account; it is not used unless you turn it on. Our use of Google user data follows the Google API Services User Data Policy, including the Limited Use requirements.
We may update this list as our providers change. Material changes will be reflected here with a new effective date. Questions: [email protected].