Skip to main content

Data processing

Who processes
your data.

The companies we rely on to run the service, what each one handles, and where. We keep this list current because our privacy policy points at it.

Last reviewed 25 September 2026.

Sub-processors

The list.

Cloudflare — hosting and infrastructure

Production web hosting, API, database and file storage, security and Turnstile verification. May process network metadata, account, licence, Journal and Workspace information as needed for the selected feature. Provider privacy notice.

Netlify — other web deployments

Static previews and separate deployments may use Netlify. Even static hosting processes request metadata such as IP addresses and logs; it is not accurate to say it receives no personal data. Provider privacy notice.

Whop — payments and membership

Acts as payment processor and merchant of record for payment-network, settlement and applicable transaction-tax purposes. It may act as an independent controller for payment, fraud, compliance and its own platform operations. GEX Levels remains the product supplier. Whop privacy policy.

Resend — email delivery

Processes recipient addresses, message content and delivery events for emails we send, including account/security, support and permitted product communications. Provider privacy notice.

Google / Chrome Web Store

An independent store/platform when you obtain the extension. Its own data practices are separate from the extension privacy notice.

Discord — optional community

A third-party platform with its own privacy responsibilities. Posts and metadata are visible according to Discord and channel settings; joining does not make all private GEX Levels content public.

Transfers

Outside the EU.

Roles and international transfers

This is a list of relevant providers, not a claim that every provider is our sub-processor for every purpose. Infrastructure and delivery providers process data under the applicable service arrangements; payment and community platforms also determine some purposes independently. Overseas transfers require an applicable legal mechanism. Depending on the relevant entity and processing, this can be an adequacy decision or contractual safeguards. Request service-specific information from support@gex-levels.com; a vendor’s presence here is not proof of a particular certification.

Changes

We update this list when providers change. Material processing changes are communicated where required. Existing contracts and mandatory protections are not replaced by publication of this list.

Related

Policies & documents.

Terms of Service

The operative terms for the site, the account and every product. Read the Terms.

Refund & cancellation

Trials, cancellation, and how refunds work. Read the policy.