This is our current list of sub-processors — third-party services we use to deliver our own services to you. Maintained as part of our UK GDPR Article 28 obligations.
Last updated: 15 May 2026
Sub-processors in active use
| Sub-processor | Purpose | Data category | Location | Privacy policy |
|---|---|---|---|---|
| Hostinger | Virtual private server (VPS) hosting | Hosting infrastructure for all our services | UK (London datacentre) | hostinger.com/legal/privacy-policy |
| Resend | Transactional email delivery (order confirmations, audit results, password resets) | Email address, recipient name, message body | US (with EU sub-processor) | resend.com/legal/privacy-policy |
| Stripe | Payment processing for paid orders | Card details (tokenised), order amount, billing address | US/UK | stripe.com/privacy |
| Lemon Squeezy | Alternative payment processor + checkout for paid orders | Card details (tokenised), order amount, billing address | US | lemonsqueezy.com/privacy |
| Beehiiv | Newsletter delivery (opt-in only — separate from transactional email) | Email address, name (optional) | US | beehiiv.com/privacy |
| Google Analytics 4 (GA4) | Anonymised website analytics | IP (truncated), page URL, referrer, device class | US (with EU data processing) | policies.google.com/privacy |
| Anthropic | AI assistance for the paid book-formatting service (Viewer chat) | Manuscript content only when you click "Ask AI" in the viewer for a paid order | US | anthropic.com/legal/privacy |
Specifically NOT used in the audit pipeline
For clarity (because authors ask): the free audit tools at /audit/ — including the KDP Readiness Score — do not use any of the following with your uploaded file content:
- ❌ OpenAI / ChatGPT API
- ❌ Anthropic / Claude API (used only in paid viewer chat, not in audit)
- ❌ Google Gemini / PaLM API
- ❌ Cohere
- ❌ Mistral AI
- ❌ Any other LLM or AI service
The audit engine runs entirely on our UK VPS using open-source PDF-processing libraries. See audit-data for the full pipeline detail.
Changes to this list
We will notify you of changes to this sub-processor list at least 30 days before any new sub-processor begins processing your data, by email (to the address you submitted) and by updating this page.
To object to a new sub-processor, email hello@publishing.co.uk within the 30-day notice window. We will work with you to find a path forward (e.g. delete your data, switch you to a non-affected service tier, etc.).
Data Processing Addendum (DPA)
If you are a business customer (agency, publisher, contracted ghostwriter) and require a signed Data Processing Addendum, email hello@publishing.co.uk. Our DPA template is UK-GDPR aligned and covers all sub-processors listed above.
Contact
- Email: hello@publishing.co.uk
- Data controller: Robert Prime, publishing.co.uk
- UK ICO: ico.org.uk · 0303 123 1113
