Legal
Subprocessors
Last updated: May 28, 2026
SendMailr LLC engages the following third-party service providers (“sub-processors”) to operate the Services. We update this page when sub-processors are added, removed, or materially change. See our Data Processing Addendum for the framework that governs sub-processor engagement, including how to object to a new sub-processor.
| Sub-processor | Purpose | Categories of data | Location |
|---|---|---|---|
| Stripe, Inc. | Payment processing, billing, and card-on-file storage. | Customer name, email, billing address, payment-method metadata (last 4, brand, expiration). Full card numbers are processed and stored by Stripe, never by SendMailr. | United States |
| Lob, Inc. | Print production, USPS handoff, and mail-tracking webhooks for letters and postcards. | Recipient names, mailing addresses, mail piece artwork and content, tracking events. | United States |
| Resend | Transactional email delivery (welcome emails, password resets, order receipts, referral invites). | Customer email address, message content. | United States |
| OpenAI, L.L.C. | AI-assisted generation of mail-piece copy on Customer instruction. | Prompt content provided by Customer (which may include recipient first-name placeholders and Customer copy). Per OpenAI’s API terms, content sent via the API is not used to train OpenAI models. | United States |
| RentCast (Realty Mole, Inc.) | Property and ownership-record data on Customer instruction for campaign list generation. | Property address, owner name, sale date, and related public-record fields. | United States |
| Vercel, Inc. | Application hosting, edge network, and Vercel Blob file storage for uploaded artwork. | All data processed through the web application, including Account Data and Recipient Data at rest in storage and in transit. | United States (global edge) |
| Railway Corporation | Hosting for background worker services and the task queue. | Data processed by background jobs, including Recipient Data during fulfillment and tracking workflows. | United States |
Additional infrastructure providers (such as our database host, content-delivery network, and monitoring tools) may process data incidental to the operation of the Services. We bind these providers to confidentiality and security obligations consistent with this page and the DPA.
Questions or objections? Use our contact form.