Subprocessors
Our subprocessors help us deliver and support our services securely, reliably, and efficiently. Review the list to see who they are and how they support our operations.
ILOVEPDF engages the following entities to provide processing activities for Customer Data (as defined in ILOVEPDF Data Processing Agreement). This list supplements and forms part of the Data Processing Agreement attached as Appendix I to the ILOVEPDF Privacy Policy.
Your privacy and the protection of your personal data are a priority. To ensure full transparency, this page provides an overview of the subprocessors involved in processing data on our behalf, the services they support, and the locations where such processing may take place. All listed subprocessors act under Data Processing Agreements or other legal mechanisms, consistent with our data protection commitments. This ensures that personal data is processed securely, used solely for authorized purposes, and protected through appropriate technical and organizational measures.
Third-Party Subprocessors
| Subprocessor | Applicable Services | Data category | Location | Purpose of Processing | Transfer Mechanism |
|---|---|---|---|---|---|
| Google Ireland Limited (Google Ad Manager) | iLovePDF iLoveSign iLoveIMG iLoveAPI |
Trackers; Usage Data | Ireland | Advertising services and campaign management | Processing within EEA |
| Google Ireland Limited (Google Analytics 4) | iLovePDF iLoveSign iLoveIMG iLoveAPI |
Browser information; City; Device information; Latitude (of city); Longitude (of city); Number of Users; Session statistics | Ireland | Web analysis and traffic monitoring | Processing within EEA |
| PayPal Inc. / PayPal (Europe) S.à r.l. et Cie, S.C.A. | iLovePDF iLoveSign iLoveIMG | Payment data; Billing information; Email address; Name | United States / Europe | Payment processing services | EU-U.S. Data Privacy Framework / SCCs |
| Stripe, Inc. | iLovePDF iLoveSign iLoveIMG iLoveAPI |
Payment data; Billing information; Email address; Name | United States | Payment processing services | EU-U.S. Data Privacy Framework / SCCs |
| Functional Software, Inc. (Sentry) | iLovePDF iLoveSign iLoveIMG iLoveAPI |
Error logs; Technical data; IP address; Browser information | United States | Application performance and error monitoring | SCCs pursuant to Art. 46(2)(c) GDPR |
| New Relic, Inc. | iLovePDF iLoveSign iLoveIMG iLoveAPI |
Browsing history; Country; IP address; Session statistics | United States | Application performance monitoring | SCCs pursuant to Art. 46(2)(c) GDPR |
| Intuit Inc. (Mailchimp) | iLovePDF iLoveIMG iLoveAPI |
Email address; Name; Usage data | United States | Email management and message sending | EU-U.S. Data Privacy Framework / SCCs |
| Twilio Inc. (Sendgrid) | iLoveSign | Email address; Name; Usage data | United States | Email management and message sending | EU-U.S. Data Privacy Framework / SCCs |
| Freshworks, Inc. (Freshdesk) | iLovePDF iLoveSign iLoveIMG iLoveAPI |
Email address; Name; Support request content; Contact information | United States | Support and contact request management | SCCs pursuant to Art. 46(2)(c) GDPR |
| Cloudflare, Inc. | iLovePDF iLoveSign iLoveIMG iLoveAPI |
IP address; Cookies; Traffic data; Content (in transit) | United States | Traffic optimization, distribution and security | EU-U.S. Data Privacy Framework / SCCs |
| Cloudscale.ch AG | iLovePDF iLoveSign iLoveIMG iLoveAPI |
Content; User files; Account data; Technical data | Switzerland | Cloud infrastructure and server hosting | Adequacy Decision (Art. 45 GDPR) |
| DigitalOcean, LLC | iLovePDF iLoveSign iLoveIMG iLoveAPI |
Account data; Technical data | European Union / United States | Cloud infrastructure and server hosting | Processing within EEA / SCCs |
| Hetzner Online GmbH | iLovePDF iLoveSign iLoveIMG iLoveAPI |
Content; User files; Account data; Technical data | European Union (Germany) | Cloud infrastructure and server hosting | Processing within EEA |
| OVH Groupe SAS (OVHcloud) | iLovePDF iLoveSign iLoveIMG iLoveAPI |
Content; User files; Account data; Technical data | European Union and other territories | Cloud infrastructure and server hosting | Processing within EEA / SCCs |
| OVH US LLC (OVHcloud) | iLovePDF iLoveSign iLoveIMG iLoveAPI |
Content; User files; Account data; Technical data | United States | Cloud infrastructure and server hosting | EU-U.S. Data Privacy Framework / SCCs |
| The Constant Company, LLC (Vultr) | iLovePDF iLoveSign iLoveIMG iLoveAPI |
Account data; Technical data | European Union / United States and other territories | Cloud computing and server hosting | Processing within EEA / SCCs |
| Open AI, LLC / OpenAI OpCo, LLC (OpenAI) | AI Tools | Content submitted for AI processing; Technical and usage data | European Union / United States | Artificial intelligence models and processing | Processing within EEA / SCCs |
* When content or user files are processed, hosting is performed on dedicated and isolated servers under control of ILOVEPDF, SL.
International Data Transfer Mechanisms
For subprocessors located outside the European Economic Area (EEA), ILOVEPDF ensures that appropriate safeguards are in place in accordance with Chapter V of the GDPR. These safeguards may include: (i) European Commission adequacy decisions pursuant to Article 45 GDPR; (ii) Standard Contractual Clauses (SCCs) adopted by the European Commission pursuant to Article 46(2)(c) GDPR; (iii) the EU-U.S. Data Privacy Framework for certified U.S. entities; or (iv) other legally recognized transfer mechanisms. Transfer Impact Assessments (TIAs) are conducted where required to evaluate the level of protection afforded to personal data in the recipient country.
Update of list of sub processors
The subprocessors list may be updated from time to time to reflect the addition, removal, or modification of subprocessors. Users may consult this list at any time to verify the subprocessors currently engaged. Notification of material changes to subprocessors may be provided to users with 30 days prior notice. Customers may object to continue the relationship based on such changes by submitting a written objection to privacy@ilovepdf.com within fifteen (15) days of receiving the notification. If a customer raises a reasonable objection and ILOVEPDF cannot accommodate such objection, the customer may terminate the affected services without penalty upon written notice. This list is maintained to ensure transparency and compliance with applicable Data Processing Agreements and data protection regulations.
Please contact privacy@ilovepdf.com with any questions or concerns.
Last revision: Thursday, February 19, 2026
