This list satisfies the GDPR Art.28 subprocessor-transparency requirement; it is updated as integrations change, and updates are not notified to each person individually.

Language and precedence: the Chinese text of this list is the master. This English version is a faithful translation provided for convenience and for payment-provider (MoR) onboarding. In the event of any conflict or ambiguity, the Chinese version governs.

SubprocessorPurposeData categoriesLocation / network
Cloudflare Cloud infrastructure: Workers (compute), D1 (database), R2 (storage), Queues (asynchronous tasks) All service operating data, query content, observation records Global edge network
DataForSEO Upstream data vendor: SERP / SEO / AI-overview data Your queries (domains / keywords / questions) are forwarded in order to fetch data Third party
MoR payment processor (effective on integration) Payment and refund processing (Creem / Waffo Pancake to be decided) Payment identifier (we never handle full card numbers) Third party
Email / support tooling (to be decided) Customer support and notifications Email address, ticket content Third party

Disclosure points