MacTidySubprocessors
Draft, not yet reviewed by a lawyer. These documents were written to match what MacTidy actually does, and they follow the usual structure for a macOS software product sold in the US and the EU. They are a starting point for your counsel, not legal advice, and they are not a substitute for review. Every [MARKED] item still has to be filled in, and the choices about governing law, the EU representative and retention periods are decisions only you can make.
The third parties that can touch personal data on our behalf. Anything not on this list does not receive it.
| Provider | What they do | Data involved |
|---|---|---|
| Lemon Squeezy | Payments and licensing. They are the merchant of record for the sale. | Email address, billing country, payment details, order records, licence keys and device names. |
| [WEB HOST] | Serves mactidy.app. | Server logs, including IP addresses. |
| [EMAIL PROVIDER] | Support email and any announcements you opted into. | Your email address and the contents of your messages to us. |
| [SMS PROVIDER, IF AND WHEN YOU SEND SMS] | Delivering text messages you opted into. | Mobile number, message content, delivery status. |
Not a subprocessor: the malware fingerprint source
MacTidy downloads a public list of known malware fingerprints from a third party threat intelligence source. This is a one way download of a public file. No personal data is sent to obtain it, and the operator receives nothing about you beyond the fact that some IP address fetched a public list. They are not processing personal data for us, so they are not a subprocessor.
Changes
If we add a subprocessor we will update this page before they start processing. [IF YOU SELL TO BUSINESSES UNDER A DPA, ADD YOUR NOTICE PERIOD AND OBJECTION RIGHT HERE]