Draft. This document is being reviewed and is not yet in force.
Spotless sub-processors
Last updated: 1 November 2026 · Version: 0.1
LEMONBYTE LLP (LLPIN ACM-5045), 259, Damodar Niwas, Gudi Paroda, Margao, St. Jose De Areal, Quepem, Salcete, South Goa- 403709, Goa, India.
| Company | What it does for Spotless | Data | Where |
|---|---|---|---|
| DigitalOcean, LLC and its parent company DigitalOcean Holdings, Inc. | Application servers and managed database | All Customer data | India, Bangalore |
| Cloudflare, Inc. | Photo storage (R2); DNS | Photos, report PDFs, problem-report screenshots | Location hint: Asia-Pacific; may be outside India |
| Amazon Web Services, Inc. | Encrypted nightly database dump storage (S3) | Nightly database dumps (all Customer data held in the database; not photos) | India, Mumbai |
| Expo (650 Industries, Inc.) | Delivering push notifications to phones | Push token, notification text | United States |
| Google LLC (Firebase Cloud Messaging) | Delivering push notifications to Android phones | Push token, notification text | Global |
| Apple Inc. (Apple Push Notification service) | Delivering push notifications to iPhones | Push token, notification text | Global |
| Resend (Plus Five Five Inc.) | Sending email (invites, password resets, messages a person chose by email) | Email address, message content | Tokyo, Japan |
| Google LLC (Google Workspace) | Our email: what people send to support, privacy and legal addresses | Whatever the sender includes | Global |
| Optional: Telegram (Telegram Messenger Inc. / Telegram FZ-LLC) | Messages for people who turn on Telegram | Telegram chat ID, message text, photos and reports managers choose to receive | Global |
| Optional: Meta Platforms, Inc. (WhatsApp Business Platform) | Messages for people who turn on WhatsApp | Phone number, message text, photos and reports managers choose to receive | Global |
Changes are announced to Customers at least 7 days before they take effect, or sooner where urgent (Data Processing Agreement, section 4).