Legal & privacy
Subprocessors
These are the third-party service providers ("subprocessors") that host or deliver Expeal services and, in doing so, process data on our behalf. Each provider processes information only to deliver its service to us — none receives data for advertising or resale, and we use no analytics or data-broker services. The governing descriptions live in the Site Privacy Policy and the Application Privacy Policy (its Section 5).
| Provider | Role | Location | Data handled |
|---|---|---|---|
| Dreamhost | Hosting for this website; mail service for the @expeal.com addresses | United States | Standard server logs for the site; email you send to any @expeal.com address |
| Heroku (Salesforce) | Hosting and database for the Expeal application | United States | Application data: accounts, case answers, and server logs, as described in the Application Privacy Policy |
| Amazon SES (AWS) | Email delivery for the Expeal application (sign-in passcodes, case notices) | United States | Recipient address and message content of application email |
| Stripe | Payment processing, where the application offers a purchase | United States | Payment card details (Stripe-side); Expeal receives transaction records, never full card numbers |
This list is kept current as providers change.