ZYLVIE SUB-PROCESSORS Last updated: October 1, 2026 DPA version: 2026-10-01 Under our Data Processing Agreement (https://zylvie.com/dpa), Zylvie may engage the following Sub-processors to process Customer Personal Data (data about your buyers, leads, and other end users) on your behalf. We will provide at least 30 days' notice of additions or replacements by updating this page and/or emailing your account email address. To object, email privacy@zylvie.com before the change takes effect. -------------------------------------------------------------------------------- NAME | LOCATION | PURPOSE -------------------------------------------------------------------------------- Stripe, Inc. | United States | Payment processing, payouts, fraud prevention, invoicing metadata PayPal, Inc. / PayPal (Europe)| United States / EEA | Payment processing and related transaction data Paddle.com Market Ltd / Paddle | United Kingdom / United States | Platform subscription billing for Zylvie plans (where used) Google LLC (Analytics) | United States | Product and website analytics for the Zylvie application and marketing site Cloud hosting & database provider(s) supporting zylvie.com | United States | Application hosting, databases, file storage, backups, CDN/edge delivery Transactional email provider (SMTP / email API used by Zylvie) | United States (or as configured) | Delivery of platform and storefront transactional emails (receipts, magic links, notifications) sent by Zylvie BirdSend | United States | Zylvie's own CRM / marketing contact sync for Zylvie account holders (not your buyer lists unless you connect BirdSend as an integration) Partnero | European Union / United States | Affiliate referral tracking for the Zylvie affiliate program -------------------------------------------------------------------------------- NOTES 1. Payment card numbers are processed by Stripe and/or PayPal. Zylvie does not store full card numbers. 2. Integrations you connect yourself (ConvertKit, MailerLite, Flodesk, AWeber, GetResponse, Drip, SendGrid, EmailOctopus, Meta, etc.) are engaged under your instructions as Controller. Those providers act as your processors (or joint controllers, as their terms may state). They are not listed above as Zylvie's standing Sub-processors for all customers; enabling an integration instructs Zylvie to transmit relevant Customer Personal Data to that provider for you. 3. If we add or replace a Sub-processor, the updated list on this page is the authoritative record. Questions: privacy@zylvie.com