Subprocessors
Last updated 24 October 2026
These are the companies that process personal data for Pupop. The DPA explains how we tell customers about changes: at least 30 days' notice by email to each workspace owner, plus an update to this page.
| Provider | What they do for Pupop | Data | Location |
|---|---|---|---|
| Cloudflare, Inc. | Runs the Pupop script and the endpoints for popup events and leads, plus queues, image storage, rate limiting and bot checks on sign-up | Visitor popup activity, session IDs, leads in transit, uploaded images | Global edge network; USA |
| Vercel Inc. | Hosts the dashboard and website | Customer accounts, popups, leads, statistics | Singapore (sin1) |
| Neon, Inc. | Hosts the database (on Amazon Web Services) | Customer accounts, popups, leads, statistics | Singapore (AWS ap-southeast-1) |
| Resend (Plus Five Five, Inc.) | Sends service emails: verification, password reset, quota warnings and lead alerts | Customer email addresses; lead contents in lead alert emails | USA |
| Stripe Payments Singapore Pte. Ltd. | Takes payments and manages subscriptions | Customer billing details only; no visitor data | Singapore; USA |
| Google LLC | Optional “Continue with Google” sign-in | Customer name, email, profile picture; no visitor data | USA |
Pupop also sends lead data to any webhook URL or email address a customer sets. Those destinations are chosen and controlled by the customer, so they aren't our subprocessors.
Contact
Halfborg Software · UEN 53254612A · Singapore · privacy@pupop.io