Sub-processors

PantoSource ("Company," "we," "us," or "our") engages third-party service providers (called "Sub-processors") to help us deliver our Services. This page lists our current Sub-processors and explains how we manage them in compliance with applicable data protection laws.

Quick Summary

• What is a Sub-processor? A third party that processes Personal Data on PantoSource's behalf in order to provide our Services.

• How we manage them: Each Sub-processor is bound by written agreements requiring them to protect Personal Data to standards consistent with our Data Processing Agreement.

• Notifications: We update this page whenever our Sub-processor list changes. Customers may subscribe to notifications below.

• Questions: Contact privacy@pantosource.com.

1. About This Page

This page provides transparency about the third-party services we use to process Personal Data on behalf of our Customers. It is updated as our infrastructure evolves.

This list does not include:

• E-commerce platforms (e.g., Shopify, WooCommerce, Magento) — these are data sources, not Sub-processors

• Advertising platforms (e.g., Meta, Google, TikTok) — Personal Data is sent to these as instructed by the Customer, who has their own relationships with these platforms

2. Current Sub-processors

The following third parties may process Personal Data on behalf of PantoSource to help us deliver our Services. All Sub-processors listed below are located in the United States.

• Awesome Screenshot — Customer support

• Cloudflare — Marketing site CDN

• Framer — Website hosting

• Google — App analytics and analysis, cloud services, application hosting, and data center services

• Heroku — Shopify App hosting

• Hotjar — App analytics and analysis

• HubSpot — Customer support, customer success management, and reporting

• LemonSqueezy — Payment processing

• LinkedIn — Analytics and analysis

• OptinMonster — Analytics and analysis

• PandaDoc — Contract administration and signature tool

• PostHog — Analytics and analysis

• ProfitWell — Analytics and reporting

• Segment — Data integration

• SendGrid — Email delivery

• Sentry — App error monitoring

• Stripe — Payment processing

• Twilio — Communications services

• Twitter (X) — Analytics, analysis, and marketing

Where Personal Data is transferred from the European Economic Area, United Kingdom, or Switzerland to a Sub-processor in the United States, the transfer is governed by Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms.

As our Services evolve, this list may be updated. Customers will be notified in advance of any additions or changes as described below.

3. Notification of Changes

We will provide advance notice of changes to this list, including the addition of new Sub-processors, at least thirty (30) days before the change takes effect.

To receive notifications, please email privacy@pantosource.com with the subject line "Subscribe to Sub-processor Updates."

4. Customer Objection Rights

If a Customer reasonably objects to a new Sub-processor on data protection grounds, the Customer may terminate the Services without penalty within thirty (30) days of the notification, as set out in our Data Processing Agreement.

5. Sub-processor Obligations

Before engaging a Sub-processor, PantoSource will:

• Conduct due diligence to assess the Sub-processor's data protection practices

• Enter into a written agreement requiring the Sub-processor to:

  • Process Personal Data only on PantoSource's instructions

  • Maintain confidentiality and implement appropriate security measures

  • Comply with applicable data protection laws

  • Notify PantoSource of any Personal Data breach

  • Permit audits and provide reasonable assistance

PantoSource remains liable for the acts and omissions of its Sub-processors as if they were its own.

6. Contact

For questions about this Sub-processor list or our data processing practices:

Address: 2333 Brickell ave D1 #36 Miami FL 33129

Email: privacy@pantosource.com