Sub-processors
Version 2026-10-17-provider-terms · All legal documents
Current sub-processors
These providers handle data for Lumdeck. Where they act as processors, our Data processing agreement requires appropriate contracts and transfer safeguards. Their standard service agreements incorporate the linked data processing terms; a separate signature is not generally required. The applicable transfer basis depends on the recipient and processing involved. Contact our privacy address for our current provider and transfer record. Stripe also acts as a controller for some payment, fraud-prevention and regulatory processing.
| Company | Purpose | Data | Location | Transfer safeguard |
|---|---|---|---|---|
| Cloudflare, Inc. United States | Hosting and network (Workers, Durable Objects), database (D1), file storage (R2), usage events (Analytics Engine), deck screenshots (Browser Rendering) | All customer data | Exact storage placement not independently verified; request processing on a global network | DPA incorporated into standard service terms; applicable Data Privacy Framework or Standard Contractual Clauses. Provider data processing terms |
| Plus Five Five, Inc. (Resend) United States | Transactional e-mail: invitations, share notices, gated-link codes, account mail | Recipient e-mail addresses, message content, delivery metadata | United States | DPA incorporated into standard service terms; applicable Data Privacy Framework or Standard Contractual Clauses. Provider data processing terms |
| Stripe Payments Europe, Limited Ireland | Payments, subscriptions and invoices for paid plans | Billing contact, company and tax details, payment method (held by Stripe only) | EU, with transfers to Stripe, LLC in the United States | DPA and Data Transfers Addendum incorporated into the Stripe Services Agreement. Provider data processing terms |
Other providers you may meet
- Google (Google Ireland Limited / Google LLC): if you choose "Continue with Google", Google confirms your identity. Google acts as an independent controller for its sign-in service and receives no presentation content.
- Public code and font sources inside decks (jsDelivr, unpkg, cdnjs, Google Fonts, the Tailwind CDN, esm.sh and image hosts): a deck's author chooses to load them; they receive viewers' IP addresses directly and are not our sub-processors.
Changes to this list
We give at least 30 days' notice before adding or replacing a sub-processor, by e-mail to workspace owners and on this page. Owners can object as described in section 5 of the Data processing agreement. Questions: office@kinesislab.ai.
Optional measurement providers
Google Ireland Limited (Google Analytics 4) and Meta Platforms Ireland Limited (Meta pixel) provide optional site and app measurement after consent. They are excluded from shared presentation viewers. These providers may act under their own controller terms as well as applicable processing terms; they are not used to process uploaded deck content. Account-specific agreement and transfer verification is incomplete. See the cookie notice.