To operate the Meniqo Service we engage a small number of carefully selected third-party processors. Each is bound by a written data processing agreement and processes personal data only on our documented instructions.
This page is updated whenever we add, change, or remove a subprocessor. The list below is current as of 2026-04-26.
Active subprocessors
| Vendor | Purpose | Data | Location | Transfer mechanism |
|---|---|---|---|---|
| Paddle.com Market Limited | Merchant of Record — billing, subscription management, tax collection, fraud prevention | Customer name, email, billing address, card details, transaction history | United Kingdom | UK adequacy decision + SCCs |
| Google LLC | Federated authentication ("Sign in with Google") | Email, name, profile photo URL, Google user ID — only when the user clicks "Continue with Google" | United States | EU-US Data Privacy Framework + SCCs |
| Hetzner Online GmbH | Hosting — application servers, database, storage | All personal data we process | Germany (within the EEA) | Within EEA — no transfer mechanism required |
| Bunny.net (BunnyWay d.o.o.) | Bunny Fonts — self-hosted typography served from EU edge | No personal data per Bunny Fonts policy (no IP logging) | Slovenia (within the EEA) | Within EEA |
Pending subprocessors (not yet active)
We will add the following before launch and update this page when each is live:
- Transactional email provider (TBD — Postmark, Resend, or Amazon SES) — email subject, body, recipient address
- CDN provider (optional — Cloudflare, Bunny CDN, or Hetzner-only) — IP addresses for cache routing
Notice of changes
We will notify customers by email at least 30 days before adding a new subprocessor that processes personal data, except where the new subprocessor replaces an existing one with materially equivalent terms.
To object to a new subprocessor, you may terminate your subscription before the change takes effect, in which case we will refund any unused portion of a yearly plan.
Data Processing Agreement
A signed Data Processing Agreement (DPA) is available on request. Email privacy@meniqo.com with your company name and we will return a counter-signed copy within 5 business days.