Sub-Processors
Third-party service providers handling personal data on behalf of iDownloadMedia
Last updated: November 4, 2025
About This List
In accordance with our Privacy Policy, we use trusted third-party service providers ("sub-processors") to help operate our platform. These providers may access or process personal data on our behalf under strict data processing agreements.
All sub-processors listed below comply with applicable data protection laws (GDPR, CCPA/CPRA) and use Standard Contractual Clauses (SCC) or equivalent safeguards for international data transfers.
| Provider | Purpose | Data Location | Transfer Basis |
|---|---|---|---|
|
Stripe, Inc.
|
Payment processing
Subscription billing, refunds, payment card tokenization
|
USA (primary) | SCC |
|
Cloudflare, Inc.
|
Infrastructure & Security
CDN, WAF (firewall), DDoS protection, R2 cloud storage, bot management
|
Global network (USA HQ) | SCC |
|
Google LLC
|
Authentication
OAuth 2.0 single sign-on (optional login method)
|
USA (primary) | SCC |
🔒 International Data Transfer Safeguards
- Standard Contractual Clauses (SCC): EU Commission-approved contracts for GDPR-compliant data transfers
- Transfer Impact Assessments: We periodically review sub-processor security measures and legal frameworks
- Supplementary Measures: Encryption in transit (TLS 1.3), encryption at rest, access controls, audit logs
- UK IDTA: UK International Data Transfer Agreement used for UK-to-third-country transfers
📢 Changes to This List
We will notify users at least 30 days in advance before adding new sub-processors that handle personal data. Notification methods:
- Email to registered users (for those who subscribe to privacy notifications)
- Update notice on this page with highlighted "NEW" badge
- Privacy Policy changelog entry
If you object to a new sub-processor, you may terminate your subscription by contacting [email protected] within the 30-day notice period.
Questions About Our Sub-Processors?
If you have questions or concerns about how our sub-processors handle your data, please contact our privacy team: