Who Else Touches Your Data
OmegaHood LLC is the data controller for PaymentHood. To run the service we use a small number of third parties, listed in full below. Each one processes data on our instructions under a written agreement, and none of them receives cardholder data.
- Last updated
- 15 August 2026
- Notice of changes
- We give at least 30 days' notice before a new sub-processor starts processing your data, so you have time to object.
- Get notified
- Email [email protected] with the subject "Subscribe to sub-processor updates" and we will notify you in writing before this list changes.
- International transfers
- The PaymentHood platform is hosted in the United States, and several sub-processors below are US-based. For customers in the EEA and the UK this means personal data is transferred outside your region. Each transfer relies on the transfer mechanism in that vendor's own data protection agreement, linked in its entry below — for Microsoft Azure that is the Microsoft Products and Services DPA, which incorporates the EU Standard Contractual Clauses.
- Objecting
- If you object to a new sub-processor on reasonable data-protection grounds, tell us within the notice period and we will work with you on an alternative or, failing that, let you terminate without penalty.
Current Sub-processors
Entries marked independent controller are not our sub-processors. They decide their own purposes for the data and you contract with them directly. They are listed so the picture is complete.
Microsoft Azure
ProcessorMicrosoft Corporation
- Purpose
- Cloud hosting for the PaymentHood platform, and retention of audit and webhook delivery logs.
- Data
- Account data, payment metadata and tokens, audit logs. No cardholder data.
- Location
- West US (California, United States)
- Agreement
- Data protection terms (opens in new tab)
Microsoft Clarity
ProcessorMicrosoft Corporation
- Purpose
- Website analytics and session recording on our marketing site. Loads only after cookie consent is granted.
- Data
- Website usage, pages viewed, clicks, approximate location from IP, session recordings.
- Location
- United States
- Agreement
- Data protection terms (opens in new tab)
Google Tag Manager and Google Analytics
ProcessorGoogle LLC
- Purpose
- Website analytics on our marketing site. Loads only after cookie consent is granted.
- Data
- Website usage, pages viewed, referrer, approximate location from IP, device and browser.
- Location
- United States
- Agreement
- Data protection terms (opens in new tab)
YouTube
ProcessorGoogle LLC
- Purpose
- Hosting the product video embedded on our home page. Nothing loads from YouTube until a visitor presses play.
- Data
- IP address, device and browser, playback events. Only for visitors who choose to play the video.
- Location
- United States
- Agreement
- Data protection terms (opens in new tab)
Fastbots chat widget
ProcessorFastbots
- Purpose
- The support chat on our website. Loads only when a visitor opens the chat.
- Data
- Email address supplied by the visitor, and the content of the chat conversation.
- Location
- United States
- Note
- Fastbots uses OpenAI to generate responses, so chat content reaches OpenAI as an onward sub-processor.
- Agreement
- Data protection terms (opens in new tab)
GitHub Pages
ProcessorGitHub, Inc.
- Purpose
- Hosting and serving our public marketing website.
- Data
- Server logs, including IP address and user agent.
- Location
- United States
- Agreement
- Data protection terms (opens in new tab)
InfyniPay APIs
ProcessorInfyniPay B.V.
- Purpose
- Payment technology APIs licensed to OmegaHood LLC and used by parts of the PaymentHood platform. InfyniPay B.V. is a supplier to OmegaHood LLC and is not a party to your agreement.
- Data
- Payment metadata and provider-issued tokens. No cardholder data.
- Location
- Amsterdam, Netherlands
- Agreement
- Covered by the commercial agreement between OmegaHood LLC and InfyniPay B.V. Available to customers on request.
Payment processing
Independent controllerYour chosen payment providers
- Purpose
- Processing the payments you route to them. You choose and connect each provider, and your agreement is directly with them.
- Data
- Cardholder data, which the provider collects directly from your customer. PaymentHood never receives it.
- Location
- Varies by provider
- Agreement
- See the agreement with each provider you enable