Humbugg policies
Sub-processors
The service providers Humbugg uses to process personal data on our behalf, and how each transfer out of the EEA/UK is protected.
Version 2026.4 · Effective September 14, 2026
Who processes data for us
We use a small number of service providers (“sub-processors”) to run Humbugg. Each one is bound by a data processing agreement that incorporates the EU Standard Contractual Clauses (SCCs), which is how personal data from the EEA/UK is protected when it reaches a provider in the United States. See our Privacy Policy, particularly “How we share information.”
| Processor | Purpose | Data categories | Region | Transfer mechanism |
|---|---|---|---|---|
| Amazon Web Services, Inc. (AWS) | Hosting, authentication (Cognito), database (DynamoDB), file storage (S3), transactional email (SES) | Account identifiers, verified email address, exchange content, wish lists, addresses, audit records | us-east-1 (N. Virginia) | AWS GDPR Data Processing Addendum (incorporated in the AWS Service Terms) with EU Standard Contractual Clauses; UK Addendum |
| Stripe, Inc. | Payment processing for Plus | Name, email, and billing details as entered on Stripe Checkout — Humbugg never stores your card data | United States | Stripe Data Processing Agreement (incorporated in the Stripe Services Agreement), SCCs |
| Google LLC (Google Workspace) | The support mailbox, support@humbugg.com | Whatever you send to support | United States | Google Workspace Data Processing Addendum, SCCs |
Changes to this list
We update this page before a new sub-processor starts handling personal data on our behalf. If you would like to be notified of changes, email us at support@humbugg.com.