To deliver the service, Baaed FREE SEO Suite engages a small number of third-party providers ("sub-processors") that may process personal data on our behalf. This page lists those providers, what they do for us, where they are based, and the safeguards we rely on. We update this page when our sub-processor list changes.
Current Sub-processors
Infrastructure & hosting
| Sub-processor | Service provided | Data processed | Region | Safeguard |
|---|---|---|---|---|
| Cloudflare, Inc. | CDN, DDoS mitigation, WAF, bot protection. | IP address, request headers, URL, security logs. | Global edge (US-headquartered) | SCCs + EU-US Data Privacy Framework |
| Amazon Web Services (AWS) | Application hosting, object storage (S3), database hosting. | All account and tool data we store. | US (us-east region) by default | SCCs + EU-US Data Privacy Framework |
Payments
| Sub-processor | Service provided | Data processed | Region | Safeguard |
|---|---|---|---|---|
| Stripe, Inc. | Card payment processing, subscription billing. | Name, email, billing address, payment-method token (never the full card number on our servers). | US, EU, UK | SCCs + EU-US Data Privacy Framework |
| PayPal Holdings, Inc. | PayPal payment processing. | Name, email, PayPal account identifier. | US, EU | SCCs |
Email delivery
| Sub-processor | Service provided | Data processed | Region | Safeguard |
|---|---|---|---|---|
| Twilio SendGrid, Inc. | Transactional email delivery (account activation, password reset, billing receipts, alerts). | Email address, message content metadata. | US | SCCs + EU-US Data Privacy Framework |
AI & content tools
These providers receive only the prompts and inputs that you submit while using an AI-backed tool (e.g. AI summarisers, image generators). They do not receive your account profile.
| Sub-processor | Service provided | Data processed | Region | Safeguard |
|---|---|---|---|---|
| Anthropic, PBC | Claude language models (text generation for AI tools). | Tool prompts and inputs. | US | SCCs + zero-retention API mode where available |
| OpenAI, L.L.C. | GPT models, image generation, embeddings. | Tool prompts and inputs. | US | SCCs + zero-retention API mode where available |
| OpenRouter, Inc. | Routing layer to multiple LLM providers. | Tool prompts and inputs. | US | SCCs |
| Firecrawl | Web crawling and screenshots for site-audit tools (when self-hosted, this entry is omitted). | The URL you submit and its public content. | US (or your own self-hosted instance) | SCCs |
| Google LLC (PageSpeed API) | Performance scoring used by the Website Reviewer. | The public URL you submit. | Global | SCCs + EU-US Data Privacy Framework |
Analytics & advertising
| Sub-processor | Service provided | Data processed | Region | Safeguard |
|---|---|---|---|---|
| Google Analytics 4 | Aggregate usage analytics with IP anonymisation. Loaded only after consent in regions that require it. | Anonymised IP, page URL, browser/device metadata. | Global | SCCs + EU-US Data Privacy Framework |
| Google AdSense | Ad delivery on ad-bearing pages. Loaded only after consent in regions that require it. | Cookie identifiers, page URL, ad interaction events. | Global | SCCs + EU-US Data Privacy Framework |
| Google Search Console | Receives only public search-impression data — no user-level data. | None (aggregate only) | Global | SCCs + EU-US Data Privacy Framework |
Authentication
| Sub-processor | Service provided | Data processed | Region | Safeguard |
|---|---|---|---|---|
| Google OAuth | "Sign in with Google" social login (only if you choose it). | Public profile, email. | Global | SCCs + EU-US Data Privacy Framework |
| Facebook Login | "Sign in with Facebook" social login (only if you choose it). | Public profile, email. | Global | SCCs |
| Twitter / X OAuth | "Sign in with X" social login (only if you choose it). | Public profile, email. | Global | SCCs |
Notice of New Sub-processors
We will update this page before engaging a new sub-processor that processes personal data. Customers on the Business plan can subscribe to email notification of changes by writing to info@baaed.com with the subject line "Subscribe to sub-processor changes".
Objections
If you object to a new sub-processor we engage, contact us at info@baaed.com. Where we cannot reasonably accommodate the objection, you may cancel your subscription per our Refund Policy.
Contact
For questions about this list:
Baaed FREE SEO Suite — Privacy Team
Email: info@baaed.com