DEFROSTSub-processors
The types of providers supporting Defrost and how to request the schedule relevant to your service.
Existing accepted agreements and customer rights continue. This publication does not make a material contractual change effective before any required notice and acceptance. Contact Defrost.
Scope
Defrost uses providers for the services described below. A provider is a sub-processor for the activities it performs on behalf of Defrost under an applicable customer DPA; some sourcing, payment or registration activities may involve separate responsibilities.
For the named schedule relevant to your service, including processing purposes, information handled, locations and applicable safeguards, contact privacy@defrostmail.com. Customers receive the information required for oversight and individuals receive recipient information required by applicable law. No purchase or confidentiality agreement is required to exercise a statutory privacy right.
Provider categories
- Hosting, databases and authentication: website and application operation, account authentication, workspace records and request metadata.
- Business-contact sourcing and verification: audience criteria, professional contact details, verification results and exclusion inputs.
- Business research and AI services: search queries, relevant professional or company context, customer instructions, research, drafts and correspondence needed for generation or classification.
- Email and delivery services: mailbox connection details, message delivery and storage, reply handling, managed warmup for enrolled mailboxes and configured placement diagnostics.
- Domain registration, registries and DNS: domain details and the registrant contact information required for registration and service operation.
- Payments and account communications: payment and subscription information, notification addresses and message content.
- Support and privacy correspondence: request details and related communications.
- Optional website analytics: usage and browser/device information when accepted. Google Analytics is identified in the analytics notice and remains off until consent.
Not every provider or service is used for every workspace. The category summary does not appoint a new sub-processor or alter an executed agreement.
Changes, notice, and objections
Existing agreements govern sub-processor authorization, contractual protections, notices, objections and remedies. Defrost will follow any agreed advance notice, including a 30-day requirement, and objection process. Availability of a schedule by email does not replace required notices or reduce existing rights.
Locations and international transfers
The application database is in the United States. Other processing and support locations depend on the service. Contact privacy@defrostmail.com for the locations and transfer arrangements applicable to your information or service. A provider’s headquarters does not establish every processing location.
Requests and existing rights
Send provider, recipient or transfer questions to privacy@defrostmail.com. See the Privacy Policy and DPA for related rights and processing responsibilities.
Existing accepted orders, terms and executed DPAs continue to govern the processing they cover. This page does not remove an agreed deletion period, export right, service level, notice, objection or acceptance requirement. Any material contractual change follows the applicable notice and acceptance process.