Back to Home
Sub-processors
Last updated: 2026-07-01
Korea: Gleezor publishes the following processors and transfer information under PIPA Articles 26 and 28-8. Global/EEA: international transfers are protected through DPAs, Standard Contractual Clauses, encryption, access controls, and related safeguards.
| Sub-processor | Purpose | Data Processed | Location | Transfer / Safeguard |
|---|---|---|---|---|
| Cloudflare, Inc. | CDN, DDoS protection, web security, Cloudflare Tunnel, R2 release/attachment storage | IP addresses, HTTP request metadata, security logs, release-download metadata | United States and global edge network | Processing/storage necessary for contract performance; SCC/DPA and security measures |
| Resend, Inc. | Transactional email delivery (verification, notifications) | Email addresses, message content | United States | Processing necessary for contract performance; SCC/DPA |
| Google LLC | Google OAuth login and signup | Google account identifier, email address, display name, OAuth metadata | United States and global | User-selected OAuth integration; Google terms and DPA |
| ip-api.com or equivalent GeoIP provider | Resolve connection IP to country code for regional checkout and notices | IP lookup request and country/region response. Gleezor does not store the IP after country-code resolution. | Provider infrastructure locations | Legitimate interest in security and regional display; minimized processing |
| OpenAI, L.L.C. | Optional L3 external LLM inference | Opted-in prompts, selected conversation turns, retrieved snippets, model name, token counts | United States and provider processing regions | Admin enablement and user opt-in; DPA/ZDR configuration; SCCs |
| Anthropic, PBC | Optional L3 external LLM inference and AI Remote CLI assistance | Opted-in prompts, selected conversation turns, support context, limited PTY output, model name, token counts | United States and provider processing regions | Admin enablement and user opt-in; DPA/ZDR configuration; SCCs |
| Payment providers (Stripe, Toss Payments, etc.) | Paid plan checkout, receipts, refunds, tax/accounting processing | Checkout session, amount, currency, payment status, billing metadata. Gleezor does not store card numbers. | Korea, United States, or provider processing regions | Payment contract performance and statutory retention duties |
Change Log
2026-07-01 — Confirmed mail-order registration details and added Enterprise onsite processor-disclosure standard
For privacy inquiries: [email protected]