Sub-processors

A "sub-processor" is a third-party service that processes personal data on our behalf. This list is published for transparency and for clients whose own compliance obligations require them to know where their data goes. If you have a data-processing agreement (DPA) with us, this list is incorporated by reference.

Infrastructure & hosting

Website hosting

[Hosting provider — to be finalized before launch, e.g., Cloudflare Pages, Netlify, or Vercel]. Purpose: serving the public website. Data processed: request logs, IP addresses. Location: global CDN with North American origin.

Email & communications

Email delivery

[Email provider — e.g., Google Workspace or Fastmail]. Purpose: sending and receiving business email at serpenticreative.com. Data processed: message content, attachments, sender/recipient addresses. Location: US or Canada.

Application form processor

Formspree, Inc. (or the current form backend). Purpose: delivering application-form submissions to our inbox. Data processed: form field content (name, email, project details, budget, etc.). Location: United States.

Payments

Payment processor

[Payment processor — to be finalized]. Purpose: processing credit and debit card transactions for storyteller packages and invoices. Data processed: cardholder name, billing address, card number (tokenized), transaction amount. Location: North America. Card data is not stored on Serpenti systems.

Analytics (optional)

Web analytics

Plausible Analytics or Fathom Analytics (only loaded if you accept analytics cookies). Purpose: aggregate pageview and referrer data. Data processed: anonymized page views, referring URL, generalized location (country/region), device type. No personal identifiers. Location: EU (Plausible) or Canada (Fathom).

Distribution & publishing partners

For client projects that include distribution setup, we work with third-party retailers, aggregators, and platforms including Amazon KDP, IngramSpark, Draft2Digital, Audible/ACX, Findaway Voices, Spotify for Podcasters, Apple Books, Google Play Books, and Kobo Writing Life. Each has its own terms and privacy practices; we transmit only the metadata required to list your title.

Professional services

Our accountants, lawyers, and specialist contractors (editors, translators, narrators, designers) may access client information as needed to perform their work. Each is bound by written confidentiality obligations.

How this list changes

We add sub-processors as our operations require. If you are an active client with a signed DPA and we add a sub-processor that would process your data, we will notify you by email at least fourteen (14) days before the new sub-processor begins processing, giving you an opportunity to object.

Contact

Sub-processor questions:
Serpenti Creative Services Inc.
Attn: Privacy
admin@serpenticreative.com