Sub-processor List

Last updated: 2026-06-24

This page lists the third-party processors (“sub-processors”) that Hushscript (LW Agency Limited) uses to deliver the Service. We require each processor to protect personal data and to use it only to provide their service to us.

We will notify users of material changes to this list in advance where required by applicable law. For questions, contact support@hushscript.com.

Processors

Stripe

• Purpose: Payment processing — handling card authorisation, payment records, and customer identity for billing.
• Data categories: Name (optional), card details (tokenised; we never see the raw card number), billing address (optional), purchase history, customer reference.
• Processing region: United States (global infrastructure).
• Website: stripe.com

Cloudflare

• Purpose: Hosting, content delivery, edge computing, storage (R2, D1), bot protection (Turnstile), and DNS.
• Data categories: IP addresses, request metadata, cookies, audio and transcript data at rest (encrypted), account and usage data.
• Processing region: Global (Cloudflare edge network); EU/EEA/UK/Swiss user data is primarily processed on Cloudflare’s EU infrastructure.
• Website: cloudflare.com

AssemblyAI

• Purpose: Speech-to-text transcription — converting uploaded audio into text, speaker labels, and language detection.
• Data categories: Audio content (retrieved via a short-lived URL; not stored by us after transcription), transcript text.
• Processing region: Audio from EU/EEA/UK/Swiss users is processed on AssemblyAI’s EU infrastructure (api.eu.assemblyai.com). All other users: United States.
• Website: assemblyai.com

Mailgun

• Purpose: Transactional email — delivering magic-link sign-in emails and service messages.
• Data categories: Email address, email content (sign-in link, service notices).
• Processing region: United States.
• Website: mailgun.com

Sentry

• Purpose: Error monitoring — capturing diagnostic information about application errors to help us identify and fix problems.
• Data categories: Error type, page URL, browser type, and breadcrumb events (personal identifiers are scrubbed before sending; IP address is not forwarded).
• Processing region: United States (Sentry’s US ingest).
• Website: sentry.io

Google / Meta (analytics and advertising)

• Purpose: Measuring website usage (Google Analytics), delivering and measuring advertising (Google Ads, Meta Pixel).
• Data categories: Cookie identifiers, ad click identifiers (gclid, fbclid), aggregated usage events. Only collected on the marketing website (hushscript.com) and only with your consent where required by law.
• Processing region: United States (global infrastructure).
• Websites: google.com, meta.com