MCPForm.io is a product of Talitu Ltd. This page is the single, current list of the third parties we use to run MCPForm.io and this website (our service providers and sub-processors). Our Terms of Service and our Privacy Policy both point here, so this is the one place we keep up to date.
How we tell you about changes
We update this page when we add or change a sub-processor. We post the change here before the new provider starts to process personal data for you. Email us and we will send you that notice by email as well.
Where we have agreed a data processing addendum with you, you may object to a new sub-processor on reasonable data protection grounds within 14 days of that notice, as set out in that addendum.
Service providers and sub-processors
Each provider below is used only to run MCPForm.io or this website, under contract terms that require them to protect personal data. Locations show where data is mainly processed; some providers also use other regions. At launch, every workspace’s data is held in the US.
| Provider | What it helps us do | Main location |
|---|---|---|
| Hosting and infrastructure | ||
| Google Cloud | Application hosting (Cloud Run), database (Cloud SQL for PostgreSQL), file storage (Cloud Storage) and secrets (Secret Manager) | USA (us-east1) |
| Cloudflare | DNS, content delivery, web application firewall, hosting for our static apps (Cloudflare Pages) and bot checks on public forms (Turnstile) | Global edge |
| Sign-in and billing | ||
| WorkOS | Sign-in, team invitations and sign-in for AI tools that connect to MCPForm.io (MCP OAuth) | USA |
| Stripe | Payments and billing, when paid plans are live. Card details are handled by Stripe and we do not store full card numbers | USA |
| Lead details and email | ||
| Data enrichment providers | Filling in a lead’s company, job, website and LinkedIn when a customer turns this on. Named here before first use | To be named |
| Transactional email provider | Sending service emails and the follow-up emails a customer sets up for opted-in leads. Named here before first use | To be named |
| Website analytics | ||
| Google (Tag Manager and Analytics) | Measuring visits to this marketing website only. Loads only after you agree in our cookie notice | USA / global |
Which of these are “sub-processors”? The providers that process the personal data of people who fill in a customer’s forms on our behalf (hosting, infrastructure, data enrichment and email) are sub-processors, and the notice process above applies to changes to those. Google Tag Manager and Google Analytics run on our own marketing website only, not on the public forms we host for customers. They are explained in our Cookie Policy.
Tools you connect. When you send leads to HubSpot, Slack, Google Sheets, Zapier, a webhook or your own email list, you choose and connect that tool. It acts for you under your own contract with its provider, so it is not one of our sub-processors.
Get told about changes
Email hello@mcpform.io with the subject “Sub-processor updates” and we will let you know by email before this list changes.
Questions
Questions about our sub-processors or data protection can be sent to privacy@mcpform.io.