Sub-processors
Last updated: September 20, 2026
BookBlurb's third-party processors and their processing purposes.
1. Cloudflare, Inc. — Hosting, edge, and security
- Cloudflare serves the Site, runs API requests, hosts D1 data, and protects against abuse. Privacy: https://www.cloudflare.com/privacypolicy/.
2. Creem — Armitage Labs OÜ — Merchant of Record
- Creem processes payments, subscriptions, invoices, refunds, and taxes as Merchant of Record. Identity: registry code 16977866, Rotermanni 14, Tallinn 10111, Estonia. Privacy: https://www.creem.io/privacy. We do not receive full card numbers.
3. Google LLC — Authentication
- Google processes the minimum openid, email, and profile scopes for Sign in with Google. We do not use Google data for advertising, profiling, or model training. Privacy: https://policies.google.com/privacy.
4. LLM provider and Resend
- Our LLM provider receives only prompt content needed to fulfil requests and model responses under a no-training DPA. Resend sends transactional email. We will publish provider identity and notify users before sending personal data to a new provider.
5. Notice and contact
- We will notify users at least 30 days before adding a new sub-processor where required. Questions or objections: privacy@bookblurb.org.