Legal
Subprocessors
Last updated 2026-08-01
Group Space works with a small number of third-party providers (“subprocessors”) that store or process personal data on our behalf so we can run the Service. Group content is end-to-end encrypted, so several of these providers only ever hold data they cannot read. See our Privacy Policy and Terms of Service for how we handle data.
| Provider | Purpose | Data it handles | Primary location |
|---|---|---|---|
| SSD Nodes (ssdnodes.com) | Application and database hosting, the server that runs Group Space | All account and group data: group content as ciphertext, plus account metadata such as names, email addresses, membership, and billing records | United States |
| Cloudflare R2 (Cloudflare, Inc.) | Object storage for photos, videos, and files | Uploaded media and files, stored encrypted | United States (Western North America bucket region) |
| SMTP2GO (smtp2go.com) | Sending transactional email (invitations, notifications, account emails) | Recipient email addresses and the contents of those messages | United States |
| Firebase Cloud Messaging (Google LLC) | Push notifications to devices | Device push tokens and notification payloads; rich content is encrypted | Global (Google) |
| Apple (Apple App Store) | Subscription payments and billing on iOS | Purchase and billing information; Apple is the seller and we do not receive card details | Global (Apple) |
| Google (Google Play) | Subscription payments and billing on Android | Purchase and billing information; Google is the seller and we do not receive card details | Global (Google) |
| RevenueCat (RevenueCat, Inc.) | Subscription and entitlement management across the app stores | Purchase and device identifiers and subscription status; no card details | United States |
We keep this list current and update it when we add, remove, or change a subprocessor.
Questions about this list: legal@group-space.com.