Bytech LLP uses the third-party providers listed below to operate Deplion. Some of them process personal data on our behalf ("sub-processors"), and some act as independent controllers for their own part of the transaction.
This page supports Section 6 of the Privacy Policy.
1. Current sub-processors
| Provider | Role in the Service | Personal data processed | Processing location |
|---|---|---|---|
| Cloudflare, Inc. | Content delivery, edge routing (Workers), key-value routing store (KV), object storage (R2), page rendering for moderation, TLS for custom domains | Content of published sites; visitor IP addresses, request metadata, country, network operator; form submission payloads in transit; page screenshots | Global edge network, with storage in the regions we configure |
| Polar Software, Inc. | Merchant of Record — checkout, payment processing, invoicing, sales tax and VAT | Name, email address, billing address, country, payment details, transaction history | United States, with onward transfer to other destinations outside the EEA and the United Kingdom |
| OpenAI, L.L.C. | Automated content moderation — analysis of published page content and screenshots | Text and images from published pages, which may contain personal data placed there by the site owner | United States |
| Google LLC | Analytics for our marketing website and dashboard. Online identifiers only after the visitor consents; anonymous cookieless measurement before that | IP address, device and browser information, pages viewed, referrer. Online identifiers only with consent | Global |
| PS.kz | Application hosting, database infrastructure, cache, queue workers, file storage, backups and network connectivity | All application data described in the Privacy Policy | Kazakhstan |
Self-hosted infrastructure
Transactional email services are operated directly by Bytech LLP using company-managed, self-hosted infrastructure.
No external email delivery provider processes transactional or support email on behalf of Deplion. Email addresses, names, message content and delivery metadata are processed within infrastructure controlled by Bytech LLP in Kazakhstan.
2. Notes on specific providers
2.1. Cloudflare serves every published site. Published sites are delivered entirely from Cloudflare's edge, so visitor traffic to your site does not reach our application servers.
2.2. Polar acts as Merchant of Record. It is an independent controller for the payment data you provide to it, and it applies its own privacy notice to that data. We receive subscription status and order records, not your full card details. Polar is established in the United States; for personal data transferred out of the EEA or the United Kingdom it relies on the Standard Contractual Clauses adopted by the European Commission.
2.3. OpenAI receives page content and screenshots for automated moderation. Content is sent as data for classification, never as instructions, and is not used by us to train models. Because you decide what to publish, you should avoid placing personal data in a published page that you would not want analysed by an automated moderation system.
2.4. Google Tag Manager runs on our own marketing website and dashboard only. The container is loaded on every page, but until a visitor accepts the Analytics category in our cookie banner it is instructed that all storage is denied: it sets no cookie, reads no identifier, and sends only an anonymous cookieless signal. Online identifiers reach Google only after consent. It does not run on the sites our users publish — cookies on those sites are the responsibility of the site owner. See the Cookie Policy.
2.5. The two entries marked "to be confirmed" above are placeholders. They will be completed with the named provider before this page is relied on as a final disclosure.
3. International transfers
Several providers process personal data outside the European Economic Area and the United Kingdom. Where we transfer personal data from those regions, we rely on the European Commission's Standard Contractual Clauses and, where applicable, the UK International Data Transfer Addendum. See Section 8 of the Privacy Policy.
4. Changes to this list
4.1. We will update this page before engaging a new sub-processor that processes personal data, or as soon as reasonably practicable afterwards where an urgent replacement is required.
4.2. To be notified of changes, write to [email protected] and ask to be added to the sub-processor notification list.
4.3. If you object to a new sub-processor on reasonable data protection grounds, contact [email protected]. If we cannot address the objection, you may terminate your subscription; Section 8.2 of the Refund Policy applies.
5. Contact
Bytech LLP (Товарищество с ограниченной ответственностью «Bytech») 29A microdistrict, building 90, office 202, Aktau, Mangystau region, 130000, Republic of Kazakhstan
- Privacy and sub-processor questions: [email protected]
Version 2026-07-31 — effective 2026-07-31.