Legal
Sub-processors
Last updated: 29 June 2026 | Version 1.0
Signal Sparrow LTD uses a small number of third-party Sub-processors to deliver the Service. A Sub-processor is a third party we engage to process personal data on behalf of our customers (who are the controllers of that data), as described in our Data Processing Agreement.
This page lists only parties that process Customer Personal Data on our behalf. Advertising and analytics platforms connected by you (such as Meta and Google) are listed separately because they generally act as independent controllers, not as our Sub-processors.
Sub-processors that process Customer Personal Data
This list reflects our current Sub-processors and may be updated from time to time in accordance with our Data Processing Agreement.
| Sub-processor | Purpose | Data processed | Location |
|---|---|---|---|
| Hostinger | Application and database hosting for the Service | Customer Personal Data stored within the Signal Sparrow application infrastructure, including events, sessions, identifiers, and attribution data. | United States (current primary hosting location) |
| Titan | Transactional and account email delivery | Account holder name, email address, and email content. | United States |
Note on Hostinger: Hostinger hosts both the Signal Sparrow application and the database that stores Customer Personal Data. In its hosting role, Hostinger acts as a Sub-processor for Customer Personal Data and also as a service provider for Signal Sparrow's own operational data (such as account and billing records).
Customer-connected platforms (not Sub-processors)
These platforms receive data only when you choose to connect and configure the relevant integration. They determine their own purposes for the data they receive and generally act as independent controllers. Their processing is governed by their own terms and privacy policies.
| Platform | Purpose |
|---|---|
| Meta Platforms, Inc. | Customer-configured conversion forwarding via the Meta Conversions API |
| Google LLC | Customer-configured conversion forwarding via Google Ads and Google Analytics 4 |
| TikTok Technology Limited | Customer-configured conversion forwarding via the TikTok Events API |
| LinkedIn Corporation | Customer-configured conversion forwarding via LinkedIn CAPI |
Operational providers for Signal Sparrow's own business
These providers support our business operations and process our own account and billing data. They do not process Customer Personal Data submitted through the Service on behalf of our customers.
| Provider | Purpose | Location |
|---|---|---|
| Stripe, Inc. | Subscription billing for Signal Sparrow accounts | United States |
| Postmark, Resend, Titan, or Amazon SES | Transactional and account email (active provider depends on deployment configuration) | Varies by active provider |
Note: Stripe appears here as our billing provider for our own customers — a separate role from the read-only Stripe connection you link to import your revenue data, which is your own Stripe account, not a Sub-processor.
Website technology providers
These providers support the public Signal Sparrow website. They are not used to process Customer Personal Data submitted through the Service, but may receive limited technical data (such as an IP address) when your browser loads the marketing site.
| Provider | Purpose | Location |
|---|---|---|
| Google LLC | Font CDN (Google Fonts) for the marketing website | United States |
| Fontshare (Indian Type Foundry) | Font CDN (General Sans) for the marketing website | India |
Notice of changes
We may add or replace Sub-processors as the Service evolves. We will provide at least 30 days' advance notice before a new Sub-processor begins processing Customer Personal Data, by updating this page and emailing the account owner.
If you object to a new Sub-processor on reasonable data-protection grounds, contact us at [email protected]; the objection process is set out in our DPA.
International transfers
Where processing involves transfers of Customer Personal Data outside the EEA or UK, such transfers are governed by appropriate safeguards (EU Standard Contractual Clauses and the UK International Data Transfer Addendum), as described in our DPA.
Contact
Questions about our sub-processors: [email protected].
Address: 16 Humberstone Close, Luton, England, LU4 9ST