Factual list of third-party vendors and data processors engaged by Sales Morgan
Pursuant to Article 28 of the GDPR and our Data Processing Agreement, Sales Morgan engages third-party subprocessors under strict contractual data protection terms to ensure that your data is processed securely and in compliance with global privacy standards.
| Vendor / Entity | Processing Purpose | Categories of Data | Location & Transfer Safeguards |
|---|---|---|---|
| Stripe, Inc.stripe.com | Payment Processing & Checkout Gateway | Billing contact name, email, billing address, transaction amount, payment tokens (raw card details are never stored by Sales Morgan) | United States EU-US Data Privacy Framework (DPF) & Standard Contractual Clauses (SCCs) |
| Cloudflare, Inc.cloudflare.com | Edge Security, WAF, Turnstile Bot Protection & DNS | IP addresses, request headers, browser security telemetry, and bot challenge tokens | United States & Global Edge Network EU-US Data Privacy Framework (DPF) & Standard Contractual Clauses (SCCs) |
| Meta Platforms, Inc. / Meta Platforms Ireland Ltd.developers.facebook.com | Official Meta Graph API OAuth & Webhook Synchronization | Instagram account ID, username, page access tokens, and inbound comment/message webhook events | United States & Ireland EU-US Data Privacy Framework (DPF) & Meta Platform Terms |
| LinkedIn Corporation / LinkedIn Ireland Unlimited Companylinkedin.com | LinkedIn OpenID Connect Authentication & Account Sign-In | User profile identifier, name, verified email address, and single sign-on authorization tokens | United States & Ireland EU-US Data Privacy Framework (DPF) & Standard Contractual Clauses (SCCs) |
| Customer-Connected Mail Services (Google Workspace, Microsoft 365, SendGrid, Amazon SES, Custom SMTP)salesmorgan.com | Email Dispatch & Inbox IMAP Synchronization (Directly Chosen & Authorized by Customer) | Outbound email messages, recipient email addresses, and inbound replies as directed by the Customer | Determined by Customer Mail Provider Configuration Direct agreement between Customer and Mail Provider / Standard Contractual Clauses |
Sales Morgan commits to providing at least thirty (30) days prior notice before engaging any new subprocessor that processes Customer Personal Data. Customers may subscribe to subprocessor notifications by emailing privacy@salesmorgan.com.
