Subprocessors
Version SUBP-2026-10-16 · Last updated October 16, 2026
These are the third parties that process personal data for RetentionSmith LLC when we run the free audit and provide the Services. Each is bound by data-protection terms at least as protective as our Data Processing Addendum. We give clients 15 days' notice by email before adding a subprocessor that processes their customers' data.
| Subprocessor | What it does for us | Data involved | Location |
|---|---|---|---|
| Fly.io, Inc. | Hosts the client portal and audit service (app.retentionsmith.com) | Account details, encrypted Klaviyo keys, audit results, drafts | United States |
| Cloudflare, Inc. | Hosts retentionsmith.com, DNS, network security, page fetching for audits | Visitor IP addresses and request data, public store pages | United States (global network) |
| Stripe, Inc. | Checkout, subscriptions and invoices | Billing contact, payment details (held by Stripe), plan | United States |
| Resend (Plus Five Five, Inc.) | Sends our transactional email: audit reports, login links, receipts, notices | Recipient email address and message content | United States |
| Google LLC (Google Workspace) | Our business mailboxes, including [email protected] | Emails you send us and our replies | United States |
AI model providers. Today our drafts are written by our own templating system from your brand profile and our copy frameworks, and no third-party AI model provider receives client or subscriber data. We will update this list and give the notice above before that changes.
Klaviyo is not our subprocessor. It is your own vendor: your subscriber data stays in your Klaviyo account, and we access it with the key you provide.
Questions: [email protected] · RetentionSmith LLC, 30 E Broadway, Suite 203, Salt Lake City, UT 84111.