Data processing
Who Else Touches Your Data
OmegaHood LLC is the data controller for PaymentHood. To run the service we use a small number of third parties, listed in full below. Each one processes data on our instructions under a written agreement, and none of them receives cardholder data.
- Last updated
- 5 August 2026
- Notice of changes
- We give at least 30 days' notice before a new sub-processor starts processing your data, so you have time to object.
- Get notified
- Email [email protected] with the subject "Subscribe to sub-processor updates" and we will notify you in writing before this list changes.
- Objecting
- If you object to a new sub-processor on reasonable data-protection grounds, tell us within the notice period and we will work with you on an alternative or, failing that, let you terminate without penalty.
The list
Current Sub-processors
Entries marked independent controller are not our sub-processors. They decide their own purposes for the data and you contract with them directly. They are listed so the picture is complete.
Microsoft Azure
ProcessorMicrosoft Corporation
- Purpose
- Cloud hosting for the PaymentHood platform, and retention of audit and webhook delivery logs.
- Data
- Account data, payment metadata and tokens, audit logs. No cardholder data.
- Location
- TBC — confirm the Azure region(s) before publishing
- Agreement
- Data protection terms (opens in new tab)
Microsoft Clarity
ProcessorMicrosoft Corporation
- Purpose
- Website analytics and session recording on our marketing site. Loads only after cookie consent is granted.
- Data
- Website usage, pages viewed, clicks, approximate location from IP, session recordings.
- Location
- United States
- Agreement
- Data protection terms (opens in new tab)
Google Tag Manager and Google Analytics
ProcessorGoogle LLC
- Purpose
- Website analytics on our marketing site. Loads only after cookie consent is granted.
- Data
- Website usage, pages viewed, referrer, approximate location from IP, device and browser.
- Location
- United States
- Agreement
- Data protection terms (opens in new tab)
YouTube
ProcessorGoogle LLC
- Purpose
- Hosting the product video embedded on our home page. Nothing loads from YouTube until a visitor presses play.
- Data
- IP address, device and browser, playback events. Only for visitors who choose to play the video.
- Location
- United States
- Agreement
- Data protection terms (opens in new tab)
Fastbots chat widget
ProcessorFastbots
- Purpose
- The support chat on our website. Loads only when a visitor opens the chat.
- Data
- Email address supplied by the visitor, and the content of the chat conversation.
- Location
- United States
- Note
- Fastbots uses OpenAI to generate responses, so chat content reaches OpenAI as an onward sub-processor.
- Agreement
- Data protection terms (opens in new tab)
FormSubmit
ProcessorFormSubmit
- Purpose
- Delivering messages sent through the contact form on our website.
- Data
- Name, email address and message content submitted by the sender.
- Location
- United States
- Agreement
- Data protection terms (opens in new tab)
GitHub Pages
ProcessorGitHub, Inc.
- Purpose
- Hosting and serving our public marketing website.
- Data
- Server logs, including IP address and user agent.
- Location
- United States
- Agreement
- Data protection terms (opens in new tab)
InfyniPay APIs
ProcessorInfyniPay B.V.
- Purpose
- Payment technology APIs licensed to OmegaHood LLC and used by parts of the PaymentHood platform.
- Data
- Payment metadata and provider-issued tokens. No cardholder data.
- Location
- Amsterdam, Netherlands
- Agreement
- TBC — request the DPA reference from InfyniPay
Payment processing
Independent controllerYour chosen payment providers
- Purpose
- Processing the payments you route to them. You choose and connect each provider, and your agreement is directly with them.
- Data
- Cardholder data, which the provider collects directly from your customer. PaymentHood never receives it.
- Location
- Varies by provider
- Agreement
- See the agreement with each provider you enable