Mailday Subprocessor List
Last updated: 2026-07-28
CreatorGeek, Inc. d/b/a Mailday uses the third-party subprocessors below to provide our Service. Each subprocessor is bound by data protection obligations consistent with our Data Processing Addendum.
You can subscribe to updates by emailing privacy@mailday.ai with the subject line "Subscribe: Subprocessor Updates." We give at least 15 days' notice before adding or replacing a subprocessor that processes Personal Data.
Infrastructure and security
| Subprocessor | Purpose | Location |
|---|---|---|
| Amazon Web Services, Inc. (AWS) | Cloud hosting, compute, database, file storage, networking | United States |
| Amazon Web Services, Inc. (AWS SES) | Inbound and outbound email delivery for assigned member inboxes; transactional email (account verification, password reset, billing receipts, security alerts) | United States |
| Amazon Web Services, Inc. (Amazon GuardDuty) | Threat detection on cloud infrastructure | United States |
| Cloudflare, Inc. (R2) | File and media storage (avatars, attachments, content media) | United States |
| Cloudflare, Inc. (Email Worker) | Secondary outbound email delivery (fallback when SES is unavailable) | United States |
| Twilio Inc. (SendGrid) | Tertiary outbound email delivery (fallback when SES and Cloudflare Email Worker are unavailable) | United States |
| Upstash, Inc. | Redis-based rate-limit counters for authentication endpoints | United States |
- Subprocessor
- Amazon Web Services, Inc. (AWS)
- Purpose
- Cloud hosting, compute, database, file storage, networking
- Location
- United States
- Subprocessor
- Amazon Web Services, Inc. (AWS SES)
- Purpose
- Inbound and outbound email delivery for assigned member inboxes; transactional email (account verification, password reset, billing receipts, security alerts)
- Location
- United States
- Subprocessor
- Amazon Web Services, Inc. (Amazon GuardDuty)
- Purpose
- Threat detection on cloud infrastructure
- Location
- United States
- Subprocessor
- Cloudflare, Inc. (R2)
- Purpose
- File and media storage (avatars, attachments, content media)
- Location
- United States
- Subprocessor
- Cloudflare, Inc. (Email Worker)
- Purpose
- Secondary outbound email delivery (fallback when SES is unavailable)
- Location
- United States
- Subprocessor
- Twilio Inc. (SendGrid)
- Purpose
- Tertiary outbound email delivery (fallback when SES and Cloudflare Email Worker are unavailable)
- Location
- United States
- Subprocessor
- Upstash, Inc.
- Purpose
- Redis-based rate-limit counters for authentication endpoints
- Location
- United States
Payments
| Subprocessor | Purpose | Location |
|---|---|---|
| Stripe, Inc. | Subscription billing, invoicing, Connect payouts, Stripe Tax | United States |
- Subprocessor
- Stripe, Inc.
- Purpose
- Subscription billing, invoicing, Connect payouts, Stripe Tax
- Location
- United States
Calls
| Subprocessor | Purpose | Location |
|---|---|---|
| Amazon Web Services, Inc. (Amazon Chime SDK) | Carries the live audio and video of a Mailday call; captures and assembles the recording when the workspace and host have both turned recording on | United States |
| Amazon Web Services, Inc. (Amazon Transcribe) | Speech-to-text — converts a call recording into the transcript filed in the workspace's library | United States |
- Subprocessor
- Amazon Web Services, Inc. (Amazon Chime SDK)
- Purpose
- Carries the live audio and video of a Mailday call; captures and assembles the recording when the workspace and host have both turned recording on
- Location
- United States
- Subprocessor
- Amazon Web Services, Inc. (Amazon Transcribe)
- Purpose
- Speech-to-text — converts a call recording into the transcript filed in the workspace's library
- Location
- United States
Calls are only recorded where the workspace has enabled recording and the host has enabled it for that meeting; the call screen discloses it to every participant, guests included, before they connect. The AI summary drafted from a transcript is produced by the AI subprocessor below. Retention of recordings and transcripts is described in Privacy Policy § 9.
AI
| Subprocessor | Purpose | Location |
|---|---|---|
| Anthropic, PBC | AI model inference for AI Features, including the summary drafted from a call transcript (no training on Customer Data) | United States |
- Subprocessor
- Anthropic, PBC
- Purpose
- AI model inference for AI Features, including the summary drafted from a call transcript (no training on Customer Data)
- Location
- United States
Product, observability, and internal operations
| Subprocessor | Purpose | Location |
|---|---|---|
| LaunchDarkly, Inc. | Feature flags, application observability (errors + performance), and opt-in session replay | United States |
| Slack Technologies, LLC | Internal alerting webhook for critical system errors (recipients are Mailday personnel; alerts may contain user / workspace / member identifiers tied to the error) | United States |
- Subprocessor
- LaunchDarkly, Inc.
- Purpose
- Feature flags, application observability (errors + performance), and opt-in session replay
- Location
- United States
- Subprocessor
- Slack Technologies, LLC
- Purpose
- Internal alerting webhook for critical system errors (recipients are Mailday personnel; alerts may contain user / workspace / member identifiers tied to the error)
- Location
- United States
Connected platforms (data exporters at customer's direction)
The following are not subprocessors in the traditional sense; they are platforms you connect to the Service. Data flows to and from these platforms only at your direction and under your authorization:
- Meta Platforms, Inc. (Instagram, Facebook, Threads)
- TikTok Pte. Ltd. and affiliates
- Google LLC (YouTube)
- X Corp. (Twitter / X)
- Pinterest, Inc.
Customer support
Customer support tickets and communications submitted to support@mailday.ai are handled by Mailday personnel using internal tooling running on the AWS infrastructure already disclosed above. We do not use a third-party support SaaS (such as Intercom, Zendesk, or Front) to process support communications, so no additional subprocessor disclosure is required for support.
Note on locations: where a subprocessor processes data outside of your jurisdiction, transfers are made under appropriate safeguards (e.g., Standard Contractual Clauses, UK IDTA).
Contact
privacy@mailday.ai
Last updated: 2026-05-13