Last updated: May 3, 2026
Lemus Digital LLC uses the following subprocessors to operate the Assilek service. These providers process personal data on our behalf under written agreements (Data Processing Addenda) that require them to protect your data and use it only for the purposes we specify.
| Subprocessor | Service / Purpose | Location | DPA / More information |
|---|---|---|---|
| Google Cloud | Cloud hosting (Cloud Run, Cloud SQL), object storage (Cloud Storage), messaging (Pub/Sub), logging | USA (us-central1 region as configured) | Google Cloud DPA |
| Stripe | Payment processing for subscriptions and billing portal | USA, with global payment routing | Stripe Privacy; DPA available in the Stripe Dashboard |
| Resend | Transactional email delivery (verification, invites, gallery share, password reset, billing notices) | USA | Resend Privacy; DPA available on request |
Notification of New Subprocessors
We will give you at least thirty (30) days' prior notice by email (to the billing contact on file) and by updating this page before adding or replacing any subprocessor that processes personal data on our behalf. During that period you may object to the change by writing to legal@assilek.com. If we cannot accommodate a reasonable objection, you may terminate the affected service in accordance with our Subscription and Payment Terms.
We may make exceptions to the 30-day notice period only where the change is required to address a security or legal emergency; in such cases we will notify you as soon as reasonably practicable.
Data Processing Agreement
If you are a customer subject to GDPR, UK GDPR, the Swiss FADP, or similar laws and require a signed Data Processing Agreement covering your use of the Service, contact legal@assilek.com and we will provide our standard DPA, which incorporates the European Commission's Standard Contractual Clauses where applicable.
Contact: legal@assilek.com