Sub-processors
These are the third parties that may process personal data on behalf of our customers. This register is part of the Data Processing Agreement: adding a sub-processor is a change we notify you about in advance, not something we do quietly and document afterwards.
Last updated 5 September 2026 · Controller and provider: Profectify LLC, operating leadadapter.com.
| Sub-processor | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| Hetzner Online GmbH | Hosting. The application, the database, the queues and the backups all run on Hetzner infrastructure in Germany. This is where your data physically lives. | Germany (EU) | Processing within the EU/EEA |
| Cloudflare, Inc. | DNS, TLS termination, CDN and bot protection in front of the application. Sees request metadata and IP addresses in transit; stores no application data. | EU edge, US parent | Standard Contractual Clauses |
| Stripe Payments Europe, Ltd. | Subscription billing, payment processing and VAT calculation. Receives the billing contact and payment details. Card numbers never reach our servers. | Ireland (EU), US parent | Standard Contractual Clauses |
| SMTP2GO Ltd. | Transactional email delivery — sign-up confirmation, approval alerts, digests, offline warnings. Receives the recipient address and the message body. | EU sending region | Standard Contractual Clauses |
| Depaza | The LLM gateway used for AI assistance such as suggesting automation keywords and drafting message copy. Receives the text you ask us to work on. EU-hosted models. | EU | Processing within the EU/EEA |
| Functional Software, Inc. (Sentry) | Application error monitoring. Receives stack traces and request context when something breaks. Configured to scrub credentials and message bodies. | EU region (de.sentry.io) | Standard Contractual Clauses |
|
Brevo (Sendinblue SAS)
Only if you enable it |
Email marketing platform, used only when you connect it yourself as an integration. Receives the lead records you choose to sync to it. | France (EU) | Processing within the EU/EEA |
Changes to this list
We notify customers at least 30 days before a new sub-processor starts processing personal data, so that there is time to object. If you object on reasonable data-protection grounds and we cannot offer an alternative, you may terminate the affected part of the service.
This page is the authoritative version of the list and is also annexed to the Data Processing Agreement. If the two ever disagree, this page is the one that was updated last.
What is deliberately not on this list
LinkedIn is not a sub-processor. LeadAdapter never sends your data to LinkedIn on our own account and never holds a LinkedIn session: everything that touches LinkedIn happens in your own browser, in your own session, under your own agreement with them.
There are no analytics, advertising or session-recording tools on the application or on this website. No third-party script runs on the pages you are reading.
Contact: [email protected]