Who they are
| Service | What for | Data | Where |
|---|---|---|---|
| Amazon Web Services (Lightsail and SES) | Hosting the app, the database and the mail buffer; sending mail | All account data; mail in transit | United States (us-east-1) |
| Stripe | Payments, invoices and the card check | Name, email, billing details; card details stay with Stripe | United States |
| Anthropic | AI summaries and reply drafts, only when you turn them on | The message being answered, your playbook, signature and tone | United States |
| Gmail drafts and Send mail as, only when you connect Google | The Gmail permissions you grant | United States | |
| Cloudflare | Turnstile bot checks on our forms | Technical signals from your browser | Global network, nearest location |
When you use one-click DNS setup, your own DNS provider receives the records you asked us to write, on your instruction. New passwords are checked against Have I Been Pwned, which receives only the first five characters of a hash of the password, never the password or anything that identifies you.
Changes
We post a new subprocessor here, and email account owners, at least 30 days before it starts. To object, write to hello@julyemail.com within that time.
- October 30, 2026: This list published.