Subprocessors
Last updated: April 2026
This page lists the third-party services we use to operate psychoanalyzeme.co.za. Each is contractually bound to process personal information only as we instruct, only for the purpose listed below, and only to the extent necessary to provide the service.
If we add a new subprocessor that will process personal information, we update this page at least 14 days before they begin processing, so you have time to object or close your account.
Current subprocessors
| Provider | Purpose | Personal information processed | Country | Privacy policy |
|---|---|---|---|---|
| PayFast | Payment processing | Name, email, payment method, transaction details | South Africa | payfast.io/legal/privacy-policy |
| Resend | Sign-in links and transactional email | Email address, email delivery metadata | United States | resend.com/legal/privacy-policy |
| [Vercel / Railway / hosting provider] | Application hosting, database, server logs | All data processed by the Site, including account email, retained scores (bundle users only), server logs | United States / EU | [provider URL] |
| Cloudflare | DNS, CDN, basic DDoS protection, email obfuscation | IP address, browser metadata, request logs | United States | cloudflare.com/privacypolicy |
| [Anthropic / OpenAI] | Generating the cross-test AI narrative report for bundle users only | Test scores (numerical only — not raw responses or identifying information beyond what the prompt template requires) | United States | [provider URL] |
What's not on this list
For transparency, here are things some sites use that we do not:
- Google Analytics, Plausible, PostHog, Mixpanel, or any other behavioural analytics. We do not track which tests you view or how long you stay on a page beyond standard server logs.
- Facebook Pixel, LinkedIn Insight Tag, TikTok Pixel, Google Ads conversion tags, or any other advertising tracker. We do not run paid advertising and do not enable cross-site tracking.
- Sentry, Bugsnag, LogRocket, or any other detailed error-monitoring tool. Server-side errors are logged with our hosting provider and contain technical metadata, not personal information.
- Intercom, Crisp, Drift, or any other live-chat widget. Support is by email only.
- Hotjar, FullStory, or any session-recording tool. We do not record what you do on the Site.
Cross-border transfers
Some subprocessors are based outside South Africa. Where personal information is transferred internationally, we rely on:
- POPIA section 72: the recipient being subject to a law, binding code, or contractual obligation that provides protection substantially similar to POPIA.
- GDPR (for EU/UK visitors): Standard Contractual Clauses (SCCs) and, where applicable, adequacy decisions.
The full Privacy Policy is at psychoanalyzeme.co.za/privacy.
Changes and notifications
When we add, remove, or change a subprocessor:
- For changes that affect what personal information is processed, where, or for what purpose, we update this page at least 14 days before the change takes effect, and notify active bundle holders by email.
- For incidental changes (a subprocessor renames itself; a region updates within the same continent), we update this page when the change occurs.
If you have any concerns about a subprocessor on this list, email info@psychoanalyzeme.co.za.
Questions
For privacy questions: info@psychoanalyzeme.co.za Information Officer (POPIA section 55): [Name and email]