Legal

Sub-Processors List

Last updated April 29, 2026

Overview

Providers who have entered into a DPA with SolvaPay will be notified by email at least thirty (30) days in advance of any addition or replacement of a sub-processor. See Section 7 of the DPA for details on the objection process.

Current Sub-Processors

Sub-Processor
Google Cloud Platform (Google LLC)
Purpose
Cloud infrastructure and hosting. All SolvaPay application data, databases, and backend services are hosted on Google Cloud.
Data Processed
Account data, transaction data, End-User data, technical/log data, all data stored by the Service.
Location of Processing
European Union (EU region)
Privacy Policy
Google Cloud Privacy
Sub-Processor
Stripe, Inc.
Purpose
Payment processing. Stripe processes all payment transactions, manages connected accounts for Providers, and handles payment card data. SolvaPay does not directly access or store raw payment card numbers.
Data Processed
Payment card details (collected directly by Stripe), transaction amounts, payer identity information, Provider payout and banking details.
Location of Processing
United States; European Union (Stripe maintains EU data residency options and complies with GDPR via SCCs and DPF certification).
Privacy Policy
Stripe Privacy Policy
Sub-Processor
Google Analytics (Google LLC)
Purpose
Website analytics. Used to analyze usage patterns and improve the Service. Data is collected via cookies with user consent.
Data Processed
IP address (anonymized where configured), browser type, device information, pages visited, session duration, referring URLs.
Location of Processing
United States (Google maintains EU data processing options and complies with GDPR via SCCs and DPF certification).
Privacy Policy
Google Privacy Policy
Sub-Processor
MongoDB Atlas (MongoDB, Inc.)
Purpose
Database infrastructure. MongoDB Atlas hosts the SolvaPay application database, storing account data, transaction records, and related platform data.
Data Processed
Account data, transaction data, End-User data, Provider data, and other core platform data as stored by the Service.
Location of Processing
European Union (MongoDB Atlas supports EU-region deployment; MongoDB complies with GDPR via SCCs and EU-US DPF certification).
Privacy Policy
MongoDB Privacy Policy
Sub-Processor
Contentsquare (Content Square SAS)
Purpose
Digital experience analytics. Contentsquare collects behavioral data on how users interact with the SolvaPay website, hosted checkout pages, and provider dashboard to improve user experience. Data is collected via cookies and scripts with user consent.
Data Processed
IP address (deleted after 3 days), unique cookie identifiers, behavioral data (mouse movements, scrolls, clicks, page navigation, session duration). Personal information fields are masked by default.
Location of Processing
European Union; United States (Contentsquare complies with GDPR via SCCs and EU-US DPF certification).
Privacy Policy
Contentsquare Privacy Policy
Sub-Processor
Ahrefs (Ahrefs Pte. Ltd.)
Purpose
Web analytics. Ahrefs Web Analytics collects cookieless, privacy-focused website usage data to analyze traffic patterns and improve the Service. No cookies are placed on visitors.
Data Processed
Page URLs visited, referrer URLs, browser type, device type, approximate geographic location (derived from IP address). IP addresses are not stored.
Location of Processing
Singapore; data may be processed in locations where Ahrefs operates infrastructure.
Privacy Policy
Ahrefs Privacy Policy

Notification

If you are a Provider with a DPA in effect and wish to subscribe to sub-processor change notifications, ensure your Account email address is current. Notifications are sent automatically to the email address associated with your SolvaPay Account.

To raise questions or objections regarding sub-processors, please contact: dpo@solvapay.com.