Subprocessors
Last updated: September 2026
Nobex Technologies Inc (“Nobex”) uses the service providers below to run Nobex Radio. Each one receives only the personal data it needs for the purpose shown and is bound by a written contract that requires it to protect that data. This page forms Annex III of our Data Processing Addendum and is referred to in our Privacy Policy.
1. Service providers (subprocessors)
These providers process personal data on our behalf, including — where noted — the listener data and recordings we process for broadcasters.
| Provider | Purpose | Personal data | Location |
|---|---|---|---|
| Google Cloud (Google LLC) | Hosting: application servers (Cloud Run, Compute Engine), database (Cloud SQL), cache, file storage (Cloud Storage), CDN, and logging | All account, station and billing records; uploaded media, logos and recordings; listener analytics; application logs | United States (us-central1, Iowa) |
| Bunny.net (BunnyWay d.o.o.) | Content delivery network for HLS streams | Stream audio; listener IP address and browser/app details in edge logs (kept for a few hours) | Global edge network; company in Slovenia (EU) |
| OVHcloud | MP3 stream relay and HLS edge servers | Stream audio; listener IP address and player details in server logs (kept up to 3 days) | United States (East) |
| Amazon Web Services (Amazon SES) | Sending service, account and billing email | Email address, name, message content | United States (us-east-1) |
| Google Workspace (Google LLC) | Staff email and support correspondence | Contact details and the content of messages you send us | United States |
| Stripe | Subscription payments; Stripe Connect for listener tips, memberships and other station payments, and payouts to broadcasters | Name, email, billing country and address; card and bank details and payout identity checks are collected and held by Stripe | United States (global service) |
| PayPal | Listener payments to stations and broadcaster payouts | Name, email, payment details (held by PayPal), transaction records | United States (global service) |
| Recurly | Legacy subscription billing records | Name, email, billing records for older subscriptions | United States |
| Safqat.ai | In-product support chat assistant | Chat messages; for signed-in customers, name, email and an account snapshot (stations, plan, on-air status) | Cloud-hosted; region available on request |
| Google Gemini API (Google LLC) | AI features: Promo Studio ad copy, images and text-to-speech; support knowledge-base search | Station name, description and genre; text you enter; logos and owner photos you upload to those features | United States |
| ElevenLabs | AI voiceover generation | The script text you submit for a voiceover | United States |
| Expo (650 Industries) | Delivering updates to the Nobex Broadcaster mobile app | Device and app version details, IP address | United States |
| Google STUN servers (Google LLC) | Connecting live co-host and browser-studio audio (WebRTC) | IP address and connection details (no audio passes through them) | Global |
2. Analytics and advertising partners
These partners are used only for our own website and marketing — never for broadcasters’ listener data or recordings. In the EEA, the UK and Switzerland they run only after you accept them in our cookie banner; everywhere, you can turn them off under “Your privacy choices” in the site footer. Meta and Google may act as independent or joint controllers of the data they receive, under their own terms.
| Provider | Purpose | Personal data | Location |
|---|---|---|---|
| Google Analytics 4 (Google LLC) | Website and product analytics | Cookie identifiers, pages visited, device and approximate location, our account id for signed-in customers | United States |
| Microsoft Clarity (Microsoft Corporation) | Usage analytics and session replay (clicks, scrolling, page interactions) | Cookie identifiers, interactions on our pages, device details, our account id (hashed by Clarity) for signed-in customers | United States |
| Meta Platforms (Meta Pixel and Conversions API) | Measuring and optimising our advertising | Cookie identifiers, pages and sign-up/purchase events, IP address, browser details; email, name, phone and country only in hashed form | United States (Meta Platforms Ireland for EEA users) |
| Google Ads (Google LLC) | Measuring our advertising (conversions) | Cookie identifiers, ad click identifiers, conversion events | United States |
3. Affiliated companies
| Provider | Purpose | Personal data | Location |
|---|---|---|---|
| Nobex Partners (affiliated company) | Nobex Radio station directory catalogue, directory listings and the web player on directory pages; Nobex Radio listener apps | Station details you publish; listener IP address and player details when the directory player loads | United States |
Apple (App Store) and Google (Google Play) distribute our mobile app under their own terms and privacy policies, as independent controllers.
4. Changes and notice
We give at least 30 days’ notice before a new subprocessor begins processing customer content or listener data (the providers in section 1). Customers may object on reasonable data-protection grounds within that period, as described in the Data Processing Addendum.
To be notified of changes, email support@nobexinc.com with the subject “Subscribe to subprocessor updates” and the email address that should receive them. We also update the date at the top of this page whenever the list changes.