Last updated: March 30, 2025 · Version 1.0
MyMediabox, Inc. (“MyMediabox“, “Processor“) engages certain third-party entities (“Sub-Processors“) to assist in the delivery of its services. These Sub-Processors may have access to personal data processed on behalf of MyMediabox customers in connection with the provision of the relevant service.
MyMediabox enters into written agreements with each Sub-Processor imposing data protection obligations equivalent to those under its customer Data Processing Agreements (“DPAs“), consistent with Article 28(4) of the General Data Protection Regulation (GDPR) and applicable data protection law.
MyMediabox will update this page before authorising any new or replacement Sub-Processor and will provide affected customers with advance written notice in accordance with its contractual commitments.
Current Sub-Processors
| Sub-Processor | Service Provided | Processing Activities | Categories of Personal Data | Location |
|---|---|---|---|---|
| Auth0, Inc. Okta Group |
Identity & authentication | User authentication, login management, credential and access control services | Account/user data; email address; authentication metadata | United States |
| Amazon Web Services, Inc. AWS |
Cloud infrastructure & hosting | Hosting application services, databases, storage, backups | Account/user data; customer content; operational data | United States EU available on request |
| Cloudflare, Inc. | CDN & security | Traffic routing, WAF/DDoS protection, performance acceleration | IP address; device/network identifiers; request metadata | Global Edge network |
| New Relic, Inc. | Observability / APM | Application monitoring, infrastructure monitoring, log ingestion/telemetry | Technical telemetry; user/session identifiers; IP address | Account-configured |
| The Rocket Science Group LLC Mailchimp |
Email delivery | Customer communications and transactional email delivery | Name; email address; communication metadata | United States |
| Joincube, Inc. Beamer |
In-app notifications | In-app announcements, changelog messaging, engagement tracking | User identifiers; interaction/engagement events; segmentation data | United States EU available on request |
| Freshworks Inc. Freshdesk |
Customer support | Support ticket management, customer communications, attachment handling | Name; email address; ticket contents; attachments (if provided) | Multi-region Tenant/data centre dependent |
| Smartlook.com, s.r.o. Smartlook |
Analytics & session replay | Product analytics, session replay, UX behaviour tracking | Session/user identifiers; device metadata; interaction events | EU / EEA Primary processing location |
| Intercom R&D Unlimited Company Intercom |
In-app support chat | Ticket management, in-app chat, customer communications, attachment handling | Name; email address; internal user ID; account creation date; conversation contents | Multi-region Tenant/data centre dependent |
Changes to this list
MyMediabox will provide customers with at least 30 days’ prior written notice before authorising any new or replacement Sub-Processor. Customers wishing to be notified of changes by email should contact us here. Changes will be reflected on this page with an updated version date.
Questions or objections
Customers who wish to raise questions about, or object to, a Sub-Processor change should contact MyMediabox in writing at [email protected] within the notice period set out in their applicable DPA.
This list applies to personal data processed by MyMediabox acting as a data processor on behalf of its customers. It does not cover personal data processed by MyMediabox as a data controller in its own right, which is addressed in MyMediabox’s Privacy Policy. For further information please contact [email protected].
EN 
ES