RHIXO

RHIXO Subprocessor Register

Current material third-party processors used to provide RHIXO services.

This document forms part of the RHIXO controlled legal framework and operates with the RHIXO Customer Agreement, RHIXO Product and Service Schedule and accepted order where relevant.

1. Purpose

This register identifies material third-party service providers that may process personal information or Customer Data in connection with RHIXO services. It supports the RHIXO Privacy Policy and Data Processing Addendum and may be updated when providers change.

2. Current material subprocessors

• Stripe - payment processing and transaction infrastructure. Data categories may include customer identity/contact details, billing metadata, payment method tokens and transaction records. Primary provider operations may involve the United States and other Stripe locations.
• Postmark - transactional email delivery. Data categories may include recipient address, message metadata and transactional email content. Provider operations may involve the United States and other authorised locations.
• Anthropic / Claude API - AI-assisted generation or transformation of customer website copy where the relevant RHIXO workflow invokes the service. Data sent is limited to the content/context required for the configured task. Provider operations may involve the United States and other authorised locations.
• GoDaddy / cPanel infrastructure - domain, DNS, hosting or related infrastructure where RHIXO uses those services. Data categories may include website content, server logs, account/contact information and operational metadata. Physical processing location depends on provider infrastructure and is not represented as fixed unless confirmed.

3. Customer-site Google Analytics

Google Analytics 4 may be installed on RHIXO-delivered customer websites using a RHIXO-controlled measurement property for service-quality, usage and performance measurement. This is a separate analytics activity and is disclosed in the RHIXO Privacy and Cookie policies. Visitor notice/consent requirements may apply depending on jurisdiction and configuration.

4. Changes

RHIXO may add, replace or remove providers as the service evolves. Where applicable law or contract requires notice or an objection process for a material new subprocessor, RHIXO will provide that process through customer communications or the current controlled register.

5. Contact

Questions about subprocessors or privacy may be sent to team@rhixo.com.au.