Legal
Last updated: 19 October 2026
This page lists the companies that process personal data for ExpanPress. It is updated whenever a provider is added or removed.
| Provider | Role | Data processed |
|---|---|---|
| Paddle.com | Merchant of Record for orders: takes payment, calculates and remits tax, handles refunds and buyer billing support | Name, email, country, order details and payment data. Paddle is the seller of record for orders it processes, and its own privacy policy applies to that data. |
| Other resellers, as enabled | Merchant of Record for orders on any other checkout provider enabled for a title. Each one is named here before it processes orders. | Same categories as Paddle.com, under that provider's privacy policy. |
| Provider | Role | Data processed |
|---|---|---|
| Supabase | Database, sign-in and creator account records | Account email, order and access records, agreement records, support messages |
| Sign-in with Google, for creator accounts | Google account identity and the email address and name Google shares for sign-in | |
| Firma | Electronic signature for creator agreements | Creator name, email and the signed agreement with its audit record |
| Resend | Transactional email: sends the download-link email after a purchase | Buyer email address, product title, download link and reply-to address |
| Vercel | Website hosting and delivery | IP address, request and device data |
| Cloudflare (Cloudflare R2 / CDN) | Cloudflare R2 object storage for digital book release files and content delivery network | IP address, request headers, and download bandwidth usage data |
| Sentry | Error monitoring, so we can fix faults | Technical error data, which may include IP address and browser details |
| Upstash | Short-lived webhook locks and payment routing configuration | Transaction reference IDs and routing configuration only. No names or email addresses. |
| OpenRouter | AI model access used to research and draft book content | Text submitted for research and drafting, which may include creator-supplied material and publicly available information |
We find and verify public creators before offering them a publishing agreement. These providers process public information about creators, and may hold public contact details, such as email addresses and phone numbers, published on creators' own pages.
| Provider | Role | Data processed |
|---|---|---|
| Exa | Web search for public creator profiles | Search queries and public page results |
| Brave Search | Web search for public creator profiles | Search queries and public page results |
| HikerAPI | Public Instagram profile and follower checks | Public profile handles and public profile statistics |
| Decodo | Retrieval of public web pages | Public page content, which may include published contact details |
| YouTube Data API | Public channel and video information | Public channel and video metadata |