Subprocessors

The services Aarya Technologies Ltd uses to run Loudmill: what each does, what data it handles, where, and which UK-approved safeguard covers data that leaves the UK. They act as our processors, bound by the data processing terms named. This list is part of our data processing agreement: we give businesses at least 30 days’ notice by email before adding or replacing one.

Services that run Loudmill (our processors)

• Microsoft Azure (Microsoft Limited, UK): hosting, the database, file storage, backups and technical logs; all the data in Loudmill. Where: UK South (London). Terms: Microsoft Products and Services Data Protection Addendum (any transfer from the UK under the UK International Data Transfer Agreement).
• Microsoft Entra External ID (Microsoft Limited, UK): email sign-in accounts; a person’s name and email. Terms: the same Microsoft Data Protection Addendum.
• Microsoft 365 (Microsoft Limited, UK): our own email inbox, for support and early-access requests; what people send us. Terms: the same Microsoft Data Protection Addendum.
• Google (Gemini API) (Google Cloud EMEA Limited): AI drafting, pictures and short AI video clips made from a business’s own pictures, only when the business asks for one; what each request needs (see AI in Loudmill), not used for training. Where: the United States and other Google locations. Terms: Google’s Data Processing Addendum, with the standard contractual clauses and the UK Addendum.
• Stripe (Stripe Payments UK Ltd): not switched on yet; it will handle card payments when a business buys extra AI clips. Loudmill never sees or stores card numbers: Stripe tells us only that a payment succeeded, its amount and its reference. Where: the UK, the EU and the United States. Terms: Stripe’s Data Processing Agreement, with the standard contractual clauses and the UK Addendum.
• Anthropic (Claude API) (Anthropic Ireland, Limited): not switched on yet; it will be the backup AI when Gemini isn’t available, handling the same as Gemini and not used for training, once its account and terms are confirmed. We’ll give 30 days’ notice before switching it on. Where: the United States. Terms: Anthropic’s Data Processing Addendum, with the standard contractual clauses and the UK Addendum.
• Open-Meteo (OpenMeteo GmbH, Switzerland): the 10-day weather forecast for a business's area, once a week, for Weather ideas; it receives the first half of the business's postcode (like LS1) or its town once, then only coordinates, nothing about any person. Where: servers in Europe and North America. Terms: Open-Meteo's terms of service (Swiss law); request logs kept 90 days. Switch Weather ideas off in Settings → Weekly drafts and nothing is sent.
• Resend (Plus Five Five, Inc.): sending emails (newsletters, follow-ups, alerts, sign-up confirmations); recipient addresses and the email. Where: the United States. Terms: Resend’s Data Processing Addendum, with the standard contractual clauses and the UK Addendum, and the UK Extension to the EU–US Data Privacy Framework.

Sign-in with your own account (independent services)

If you sign in with Google or a Microsoft work account, that service checks who you are under its own terms with you, and tells Loudmill your name and email. It acts for itself, not for us.

Phone alerts travel through your browser’s own push service (Google, Apple, Mozilla or Microsoft, depending on your browser), which may be outside the UK. It’s part of your browser, under its terms with you, and it’s used only if you switch alerts on. Loudmill sends it the address your browser created for alerts and the alert itself, encrypted so the push service can’t read it; it also sees when the alert was sent and where from. Switch alerts off in Settings at any time.

Where a business sends data itself

When a business connects and publishes to Facebook, Instagram, Threads, LinkedIn, Pinterest, its Google Business Profile, Bluesky or Mastodon, or connects its own Mailchimp account, what it publishes or sends goes to that service on the business’s instruction, and that service holds it under its own terms with the business. They aren’t our subprocessors.

Last updated 21 October 2026.

Back to Loudmill · Privacy notice · Data processing agreement · Terms of service