Legal · Email Validation
Sub-processor List
Last updated: May 29, 2026
"Sub-processor" means a third party we engage to process personal data on your behalf in connection with the Email Validation service. Each Sub-processor is contractually bound to data-protection obligations no less protective than those in our DPA.
We update this list at least 14 days before adding or replacing a Sub-processor. To object to a change, email yo@publishnow.app within that window — see DPA §6 for the resolution process.
Current Sub-processors
| Service | Purpose | Region | Data categories |
|---|---|---|---|
| Cloudflare, Inc. Workers, Workflows, D1, Queues, KV, Web Push, Turnstile |
Application runtime, database, async pipeline, anti-abuse, push notifications | Global edge network (controller: United States) | Uploaded email lists, notification email, IP, UTM parameters, job metadata, anti-abuse counters, derived verdicts |
| Backblaze, Inc. B2 object storage |
Persistent storage of input CSVs and result CSVs (scored, deliverable-only, risky-review, errors) | United States | Uploaded email lists, result files |
| Cloudflare 1.1.1.1 (DNS over HTTPS) | Authoritative MX-record lookups during validation | Global edge network | Domain part only. No email local-part, no per-list information, no notification address. |
| Google Public DNS (8.8.8.8 / dns.google) | Fallback MX-record lookups when the primary DoH endpoint is degraded | United States (global anycast) | Domain part only. Same scope as Cloudflare DoH above. |
| Email provider (to be confirmed) Transactional + result-notification email delivery |
Sending the validation-complete notification email and (where opted-in) marketing follow-ups | To be confirmed pending vendor selection (see PRD §13 OQ#1) | Notification email address, first-name where supplied, result summary copy, signed download links |
| Stripe, Inc. | Not used by the Email Validation tool in MVP. The Email Validation tool is free of charge with no payment flow. | N/A | N/A |
Out of scope
The Email Validation tool does not use:
- Any analytics, ad-tech, or fingerprinting Sub-processors (no Google Analytics, no Meta Pixel, no Hotjar, no Segment).
- Any third-party enrichment provider — we do not look up additional data about uploaded email addresses.
- Any SMTP probing service — V2 may introduce one; this list will be updated 14 days before that change.
- Any LLM provider — we do not pass uploaded addresses through an AI inference API.
Cookies
The validation tool sets no first-party tracking cookies. The only third-party cookie set on the upload page is the Cloudflare Turnstile challenge cookie, used solely to prevent automated abuse — see Cloudflare's privacy policy for details. The result-detail page sets a short-lived session cookie only when the user is authenticated; anonymous result-detail pages set no cookies.
Notification of changes
When we add or replace a Sub-processor we will:
- Update this page at least 14 days before the change takes effect.
- Notify subscribers to our Sub-processor change list (email yo@publishnow.app with subject "Subscribe — validation subprocessors" to join).
- Ensure the new Sub-processor is bound by data-protection obligations consistent with the DPA.
Contact
- Email: yo@publishnow.app
- Postal: Driven Success LLC, 160 Greentree Drive, Suite 101, Dover, Delaware 19904, United States
- See also: Data Processing Agreement · Email Validation Privacy Notice