Subprocessors

Website Builder Studio, a product of 1000x Digital LLC. Website Builder Studio runs on Microsite Generator, a SaaS platform by 1000x Digital LLC.
Last Updated: November 1, 2026

This page lists the processing activities that other companies carry out for us, on our instructions, so that we can provide Website Builder Studio. Each company is named beside the activity it performs, with the information it can see and where it processes that information. These companies process the information for us under data processing terms, except our support mailbox as Activity 8 explains, and our AI providers may not use it to train their models. This list forms part of our Data Processing Agreement (DPA) at https://app.websitebuilder.studio/dpa.

WE GIVE AT LEAST 30 DAYS' NOTICE BEFORE WE ADD OR REPLACE A SUBPROCESSOR.

We email the account owner of every customer account and update this page at least 30 days before the change takes effect. If you object and we cannot resolve the objection in good faith, you may end the affected service as our DPA describes.

1. PROCESSING ACTIVITIES

ACTIVITY 1. Hosting and running the service, and storing its data
Company: Cloudflare, Inc.
What it does: Runs the platform; holds the database, uploaded files and sign-in sessions; serves your published sites; connects your custom domains; delivers content; keeps request logs; routes email sent to our addresses.
What it can see: Everything the platform holds, including your account details, your sites and content, and the inquiries your sites receive.
Where: United States, and the other countries in which Cloudflare operates data centers.

ACTIVITY 2. Bot protection on forms
Company: Cloudflare, Inc. (Turnstile)
What it does: Checks that a form on your site, or on our sign-up pages, is being filled out by a person and not by a bot.
What it can see: The IP address and browser signals of the person submitting the form.
Where: United States, and the other countries in which Cloudflare operates data centers.

ACTIVITY 3. Speech-to-text for voice input
Company: Cloudflare, Inc. (Workers AI)
What it does: Turns what you say to the AI assistant by microphone into text. We do not store the recording or the transcript;
the text is placed in your message box for you to send.
What it can see: The voice recording.
Where: United States, and the other countries in which Cloudflare operates data centers.

ACTIVITY 4. AI writing and the AI assistant
Company: Anthropic, PBC
What it does: Provides the AI models that write and edit your site content and power the AI assistant, including the web searches the assistant runs for you.
What it can see: What you type or say to the assistant; files you upload to the assistant; your business information and site content; the rows of a connected Google Sheet and a summary of a connected HubSpot account's deals, when the assistant reads them; and, when you ask the assistant about your inquiries, the details of those inquiries (the inquirer's name, contact details and message).
Where: United States.
AI provider: Yes. It may not use your information to train its models.

ACTIVITY 5. Image generation
Company: OpenAI OpCo, LLC
What it does: Creates images for your sites from a text description.
What it can see: The text description of the image (the image prompt).
Where: United States.
AI provider: Yes. It may not use your information to train its models.

ACTIVITY 6. Subscriptions and payments
Company: Stripe, Inc.
What it does: Runs checkout, subscriptions, invoices and usage-credit purchases.
What it can see: Billing details and payment information. Card details are entered on Stripe's own page and never reach our systems.
Where: United States.

ACTIVITY 7. Sending email
Company: Plus Five Five, Inc. (Resend)
What it does: Sends the service's email: account emails, the notice to you of each new inquiry, the automatic reply to the person who inquired, and any follow-up emails to inquirers that you turn on.
What it can see: The email address of each recipient and the content of each email, including an inquirer's name, contact details and message.
Where: United States.

ACTIVITY 8. Sign-in with Google, our support mailbox, and Google Sheets you connect
Company: Google LLC
What it does: Lets you sign in with your Google account instead of a password (only if you choose it); holds the mailbox that receives the email you send to our support address and the copies of feature requests you send in the service; and, when you connect a Google Sheet by sharing it with our service account, reads the rows of that sheet for you (read-only). Our support mailbox is a standard Google mailbox and is not yet covered by data processing terms; we are moving it to a business account.
What it can see: That you are signing in to our service and the email address of the Google account you use; what you write to our support address and any details you include; and the rows of a sheet you share with us.
Where: United States.

WE DO NOT SELL PERSONAL INFORMATION, AND WE DO NOT SHARE IT FOR CROSS-CONTEXT BEHAVIORAL ADVERTISING.

WE DO NOT USE YOUR CONTENT OR YOUR INQUIRIES TO TRAIN AI MODELS, AND OUR AGREEMENTS WITH OUR AI PROVIDERS DO NOT PERMIT THEM TO DO SO.

2. SERVICES YOU CONNECT YOURSELF: NOT OUR SUBPROCESSORS

When you connect a destination for your inquiries or your data, the information goes where you send it, at your instruction. From that point it is governed by your own agreement with that company, not by ours. You can disconnect any of them at any time.
Destinations available today: HubSpot, Salesforce, Google Sheets, Slack, Microsoft Teams, Mailchimp, Kit (ConvertKit), ActiveCampaign, GoHighLevel, Zoho CRM, Pipedrive, text messages through your own Twilio account, and any webhook address you supply (which is also how Zapier, Make and n8n are reached).

3. SERVICES A VISITOR'S BROWSER CONTACTS ON YOUR PUBLISHED SITE: NOT OUR SUBPROCESSORS

If your site shows a map, a video, a social media post, web fonts, a booking calendar, or an analytics tag you add, the visitor's browser contacts that company directly. Those companies are not our subprocessors, but they can see the visitor's IP address and may set their own cookies. Your site's own privacy policy should cover them.
Typical examples: Google Fonts, Google Maps (loads only when the visitor clicks it), YouTube, Vimeo, Instagram, Facebook, booking tools such as Calendly, and Google Analytics if you add your own tag.
We do not place advertising or tracking scripts or cookies on your published sites. We count page views on our own servers when a page is served.

4. PUBLIC SOURCES WE READ AND NOTICES WE SEND: NO PERSONAL INFORMATION

- We read free public reference data, such as United States Census Bureau data, to ground the area and industry facts on your pages.
- When you ask, the AI assistant can look up the search suggestions people see for a phrase (such as a service and a town) and read public web pages, such as your current website or a competitor's page. Only the phrase or the page address is sent.
- When you publish or change a page, we may notify the search engines that accept automatic notifications (IndexNow). The notification carries page addresses only.

5. HOW TO BE TOLD ABOUT CHANGES

Every account owner is emailed at least 30 days before a subprocessor is added or replaced. Anyone else who wants the same notice (for example, your privacy or procurement team) can email hello@micrositegenerator.com with the subject "Subprocessor notices" and the address to notify, and we will add it to our notice list. To leave the list, email us with the subject "Unsubscribe: subprocessor notices".

QUESTIONS

Email hello@micrositegenerator.com, or write to 1000x Digital LLC, P.O. Box 700012, Plymouth, MI 48170-9998.

CHANGE HISTORY

November 1, 2026 — first published.

1000x Digital LLC, P.O. Box 700012, Plymouth, MI 48170-9998

Version 1.0