THIRD PARTIES WE RELY ON
GetPublicIP Limited ("we", "us"), uses the following third-party services to deliver GetPublicIP. Some of these services may process personal information of our customers. We have signed a data processing agreement with each subprocessor where required under applicable data protection law (including GDPR Article 28 for EU/UK data).
We will update this list when we add a new subprocessor or replace an existing one. We will give existing customers at least thirty (30) days' advance notice of any material change by email or via the customer dashboard so that you have an opportunity to object.
For general information about how we handle your personal information, see our Privacy Policy.
1. CURRENT SUBPROCESSORS
| Subprocessor | Purpose | Location | Data shared |
|---|---|---|---|
| Stripe, Inc. | Payment processing, billing, subscription management | United States (with EU / UK processing for EU / UK customers) | Name, email, billing address, payment method metadata (we do not store your full card number) |
| Vultr (The Constant Company, LLC) | Hosting of tunnel endpoints and customer IP allocations | Multiple regions worldwide — see vultr.com/features/datacenter-locations | Network metadata, IP address bindings, server-side operational logs |
| SMTP2GO (Sand Dune Mail Ltd) | Delivery of account emails (verification, password reset, invoices, SLA notifications) | Sydney, Australia | Name, email address, content of the email being sent; email headers retained by SMTP2GO for 35 days |
Contact us at privacy@getpublicip.com if you need a copy of any data processing agreement or sub-processor terms.
2. SELF-HOSTED SERVICES
The following analytics and security services are self-hosted by GetPublicIP Limited and do not involve any third-party subprocessor:
- Plausible Analytics: cookieless website analytics, self-hosted at analytics.getpublicip.com. Plausible does not share data with any third party.
- Altcha CAPTCHA: proof-of-work CAPTCHA, runs entirely in the visitor's browser. No data is sent to any third party.
3. OUR OBLIGATIONS TO YOU
For each subprocessor we engage:
- we assess their security and privacy practices before engagement;
- we sign a written data processing agreement that imposes obligations at least as protective as those in our own Privacy Policy and, where applicable, GDPR Article 28;
- we limit the data they receive to what is strictly necessary for the stated purpose;
- we remain responsible to you for the subprocessor's handling of your personal information.
If you believe a subprocessor is handling your information improperly, contact us at privacy@getpublicip.com and we will investigate.
4. QUESTIONS
If you have questions about our subprocessors, contact us at privacy@getpublicip.com.