Subprocessors

This page lists providers that may process operational data for page delivery, analytics, payments, license validation and support. Statement contents are not sent to these providers in Local Mode.

Privacy policyDPA

Last updated: 2 July 2026

Current providers

ProviderPurposeData categoriesProcessing region
Cloudflare Pages / CDNWebsite delivery, TLS, security headers and edge cachingRequest metadata such as IP address, user agent, URL and security logsGlobal edge network, including US and EU/EEA locations
GumroadPayment processing, order records, refunds and license validationPurchase email, order/license details, payment metadata and license key validation requestUnited States and other provider locations
Plausible AnalyticsOptional anonymous, cookieless website analyticsPage URL, referrer, device/browser summary and approximate country-level locationEuropean Union/EEA or the configured Plausible workspace region
Support email providerCustomer support and privacy requests sent to support@antelope.toolsEmail address, message contents, attachments you choose to send and support historyUnited States and EU/EEA depending on mailbox routing
Cloud OCR providerNone currentlyNo statement files are sent to cloud OCR today. Before cloud OCR launch, uploads must use real MIME validation, file/page limits, randomized private storage, short-lived signed URLs, isolated OCR workers, resource limits, deletion evidence and safe logs.Not applicable

Change process

New subprocessors that would receive personal data or statement contents will be listed here before launch. Cloud OCR, if ever added, will be opt-in, will not be used for model training, and must pass the cloud OCR launch gate on the Security page before production use.

Frequently asked questions

Who processes payment and license information?

Gumroad processes payment details, purchase records and license validation requests. LINGYANG does not receive full card details.

Which analytics tool is used?

Plausible Analytics may be used for cookieless, anonymous page analytics when configured. Analytics never include statement contents.

Is there a cloud OCR subprocessor?

No. OCR currently runs on device with self-hosted Tesseract.js assets. If cloud OCR is introduced, the provider will be listed before use and the upload security launch gate must be complete.