Subprocessors
Version: 1.0
Last Updated: June 12, 2026
This page lists the third-party service providers (“subprocessors”) that Vidilec — operated by Kevin Steven Morales Castro — engages to process personal data in the course of providing the Vidilec ecosystem of applications (vidilec.com, Gyth, and future applications). We maintain a data processing agreement (DPA) with each subprocessor, including appropriate safeguards for international transfers.
We will update this list when we add or replace a subprocessor.
1. Subprocessors
1. Subprocessors
| Provider | Entity & Location | Service / Purpose | Personal data processed | Transfer safeguards |
|---|---|---|---|---|
| Cloudflare | Cloudflare, Inc., San Francisco, CA, USA (global edge network) | Hosting, content delivery (CDN), DNS, DDoS protection and security, privacy-first web analytics (cookieless) | IP addresses, technical request data (browser/device headers, logs), security event data; application data hosted on Cloudflare infrastructure | EU–U.S. DPF, UK Extension, and Swiss–U.S. DPF (certified); SCCs as fallback; EU Cloud Code of Conduct |
| Auth0 (Okta) | Auth0, LLC (a company of Okta, Inc.), San Francisco, CA, USA | Identity management and authentication for the Vidilec Account (login, sessions, account security) | Name, email address, password (hashed), avatar, authentication logs, IP addresses, device identifiers | EU–U.S. DPF, UK Extension, and Swiss–U.S. DPF (certified); SCCs in DPA |
| Lemon Squeezy | Sold through Link, LLC (f/k/a Lemon Squeezy, LLC, a Stripe company), Salt Lake City, UT, USA | Merchant of Record: subscription billing, payment processing, tax calculation and remittance, receipts | Name, email address, billing address and country, payment card data (processed solely by Lemon Squeezy — never accessible to Vidilec), transaction and subscription records | EU–U.S. DPF, UK Extension, and Swiss–U.S. DPF (certified, via Stripe); SCCs; DPA available at lemonsqueezy.com/dpa |
Note on Lemon Squeezy: as Merchant of Record, Lemon Squeezy is the seller of record for purchases and acts as an independent controller of the payment and billing data it collects for its own legal and tax obligations, in addition to processing limited subscription data on Vidilec's behalf. Its processing is governed by its own privacy policy and terms.
2. Infrastructure Note
2. Infrastructure Note
Vidilec's applications and user content are hosted on Cloudflare's infrastructure. No other hosting or cloud provider currently has access to personal data.
3. Changes to This List
3. Changes to This List
We will update this page when subprocessors change.