Last Updated: December 3, 2025
Subprocessors
Wordize is operated by Smallize Pty Ltd. For the complete list of subprocessors used across all Smallize services, please visit the Smallize Subprocessors List.
Wordize-Specific Services
In addition to the company-wide subprocessors, Wordize specifically uses the following services:
| Subprocessor | Service Provided | Data Processed | Location | GDPR Compliance |
|---|---|---|---|---|
| Keycloak Authentication System | Identity and Access Management (user authentication for purchase.wordize.com) | Email addresses, password hashes, authentication tokens, login history | Self-hosted at auth.wordize.com (Australia) | Self-managed, encryption, access controls, security audits |
| PostHog Inc. | Product analytics and feature usage tracking (wordize.com only, with user consent) | Anonymous usage data, page views, clicks, feature interactions, browser type, geographic location (first-party cookies only, no cross-site tracking) | EU-hosted (Frankfurt, Germany) | EU data residency, Standard Contractual Clauses (SCCs), first-party cookies, GDPR-compliant data processing |
| Google Analytics | Website traffic analytics (wordize.com only, with user consent) | Anonymous usage data, page views, browser type, geographic location (country/city), referral source (IP addresses anonymized) | United States | Consent Mode v2, Standard Contractual Clauses (SCCs), IP anonymization |
Note: Payment processing and e-commerce services are handled separately by purchase.wordize.com. For the complete list of payment processors and other subprocessors used by the purchase platform, please visit purchase.wordize.com.
Data Protection Standards
All subprocessors comply with GDPR, CCPA, and applicable data protection laws. They implement encryption, access controls, and security audits; process data only as instructed; use Standard Contractual Clauses (SCCs) for international data transfers; and support our compliance with user rights (access, deletion, etc.).
Changes to Subprocessors
We may add, remove, or replace subprocessors from time to time. If we make significant changes that affect how your personal data is processed, we will update this page and the last updated date above. For material changes, we may also notify you via email (if you have an account) or through a notice on our website.
Request Subprocessor Information
If you have questions about our subprocessors or would like to request:
- Copies of Standard Contractual Clauses (SCCs)
- Data Processing Agreements (DPAs)
- Additional information about a specific subprocessor
Please contact: privacy@smallize.com
Related Policies
- Privacy Policy - How we handle your data, authentication, and GDPR rights
- Cookie Policy - Cookies used by our services
- Security Practices - Our security measures
- purchase.wordize.com - Payment processors and e-commerce subprocessors