← Back to Privacy Policy

Last updated: November 7, 2025

FoodMenuChat uses the following sub-processors to provide our services. These sub-processors are carefully selected and contractually obligated to maintain appropriate security measures and comply with data protection laws.

Categories of Sub-Processors

When our service launches, we anticipate using sub-processors in the following categories:

Sub-Processor	Purpose	Data Processed	Location
Cloudways	Cloud hosting infrastructure and data storage	All service data (encrypted)	United States
Cloudflare	CDN, web application firewall, and DNS services	IP addresses, usage logs, and technical data	Global (multiple data centers)
Amazon Web Services (AWS)	Email delivery and communication services	Email addresses and message content	United States
Paddle	Payment processing for subscriptions	Billing information and payment data	United States/Europe
Additional Payment Processors	Alternative payment processing options	Billing information and payment data	Varies by processor

Sub-Processor Selection Criteria

All sub-processors are selected based on:

• Security Standards: SOC 2 Type II compliance or equivalent
• Data Protection: GDPR compliance and appropriate safeguards
• Contractual Obligations: Standard contractual clauses for data processing
• Business Continuity: Reliable service with minimal downtime
• Transparency: Clear privacy policies and data handling practices

Notification of Changes

We will notify Controllers (restaurants) of any new sub-processors at least 30 days before they begin processing data. Controllers may object to new sub-processors during this period.

Data Processing Agreements

All sub-processors sign data processing agreements that include:

• Strict confidentiality obligations
• Security measures equivalent to our own
• Limitation of data processing to our instructions only
• Assistance with data subject rights requests
• Notification requirements for data breaches
• Data deletion obligations upon termination