Opening September 1

Meet the team
Legal · Sub-processors

Sub-processors

Effective September 1, 2026·Register updated July 12, 2026

SmashOne uses a small set of vetted service providers ("sub-processors") to deliver the Service. Each is bound by contract to service-provider obligations under the CCPA/CPRA: they process personal information only to provide their service to us, and may not sell or share it. See also our Data Processing Addendum and Privacy Policy.

Current SmashOne sub-processors
Sub-processorWhat it processesLocationSafeguards
Stripe, Inc. Payment processing — payment card details (collected directly by Stripe), billing name and address, transaction and invoice history United States Stripe DPA; service-provider contractual terms
DigitalOcean, LLC Cloud hosting, managed PostgreSQL database, cache and object storage — all hosted application data (US production) United States DigitalOcean DPA; service-provider contractual terms
Google LLC (Vertex AI) AI text generation for the assistant and content tools — customer and end-customer message content, prompts United States (global processing) Google Cloud DPA; paid, no-training API terms
Google LLC (Google Workspace / Gmail) Transactional and support email — email address, name, message content for account and support correspondence United States (global infrastructure) Google Workspace DPA; service-provider contractual terms
Telegram FZ-LLC Messaging channel — customer DMs, AI replies and support conversations (message content and attachments, Telegram user id and username, timestamps) United Arab Emirates (global infrastructure) Service-provider contractual terms; processing limited to the messages customers choose to send
Cloudflare, Inc. CDN, DNS, WAF and DDoS protection — IP addresses, request metadata, data in transit Global edge network Cloudflare DPA; service-provider contractual terms
Functional Software, Inc. (Sentry) Application error and performance monitoring, configured with PII minimisation United States Sentry DPA; service-provider contractual terms
PostHog, Inc. Pseudonymous, server-side product analytics — usage events, feature interactions, account identifiers United States (US Cloud) PostHog DPA; no sale or sharing of personal information (CCPA service-provider terms)

01Changes to this list

We update this register before engaging a new sub-processor that will process personal information. Material changes are reflected on this page with an updated register date. Questions about a listed provider: [email protected].

Privacy inquiries: [email protected]. SMASHONE CORPORATION, 5784 Keith Rd, Jupiter, FL 33458, United States.