Buildaur LLC ("Buildaur") engages the third-party service providers listed below to help deliver the Buildaur platform. Each entry describes what the provider does, the categories of personal data Buildaur shares with them, and where the provider processes that data.
Per Section 5.3 of our Data Processing Addendum, Buildaur notifies Business Clients at least thirty (30) days before adding or replacing any subprocessor — either by email to the account email of record or by updating this page with a public changelog. Business Clients with a reasonable data-protection objection may raise it under the DPA's notice-and-objection procedure.
Entries marked Conditional are only engaged when a Business Client has explicitly connected the relevant integration on their Buildaur dashboard. They process no data for any Business Client who hasn't activated that integration.
Core Subprocessors
Universally engaged for every Buildaur Business Client.
| Subprocessor | Purpose | Data Categories | Region | Status |
|---|---|---|---|---|
| Hostinger International Ltd. | VPS hosting, MariaDB database, file storage, and transactional email (SMTP) for the buildaur.app application. | All Customer Personal Data described in DPA §3.4 (account information, builder configurations, design content, order details, online identifiers). | EU (Lithuania) | Core |
| Stripe, Inc. | Payment processing for Buildaur subscription fees; fraud detection and chargeback handling. | Payment method tokens; limited card metadata (last 4 digits, brand, expiration); billing addresses; transaction amounts and dispute records. Buildaur does not receive full card numbers. | United States (with EU subsidiaries for EEA customers) | Core |
Conditional Subprocessors
Engaged only when a Business Client explicitly connects the corresponding integration on the dashboard. Business Clients can disconnect these integrations at any time, which terminates Buildaur's onward data sharing with the provider.
| Subprocessor | Purpose | Data Categories | Region | Status |
|---|---|---|---|---|
| Squarespace, Inc. | Bi-directional sync with the Business Client's Squarespace store: forwarding cart redirects, receiving paid-order notifications, and reconciling order status. | Order ids, customer name, customer email, shipping address, item selections. | United States | Conditional |
| Shopify Inc. | Bi-directional sync with the Business Client's Shopify store: draft order creation, payment-status polling, and order reconciliation. | Order ids, customer name, customer email, shipping address, item selections. | Canada | Conditional |
| Goshippo, Inc. | Shipping rate calculation and label generation when a Business Client uses the in-dashboard Buy Label flow. | Recipient name, recipient phone (when provided), full shipping address, package dimensions and weight, return address. | United States | Conditional |
Changelog
- May 10, 2026 — Initial publication.
Questions
Questions or objections regarding this list, or requests for supporting documentation about a subprocessor's security and compliance program, may be sent to support@buildaur.app.