This document is a template for review purposes and is not yet an executed legal agreement. Company details shown in brackets are placeholders.
Subprocessors
The third parties Nulx engages to operate the service. None of them receives customer media — media bytes remain in the customer's own cloud account.
| Name | Role | Location |
|---|---|---|
| Cloudflare | Object storage (R2) and CDN for Nulx-operated infrastructure. BYO customer media remains in the customer's own cloud account and never transits this subprocessor. | [Location] |
| PayPal | Payment processing. | [Location] |
| Creem | Payment processing (merchant of record where applicable). | [Location] |
| [Additional subprocessor] | [Role placeholder] | [Location] |
Change notification
Nulx will post updates to this page and notify customers by email at least 30 days before a new subprocessor is engaged or an existing one is replaced. Customers may object to a change on reasonable data-protection grounds by contacting [privacy contact placeholder] within the notice period.
Scope limitation
Subprocessors are engaged for the account, billing, and orchestration-metadata functions described in the DPA. No subprocessor is granted access to customer media, because Nulx itself never takes custody of it.