Service providers & data connections

How to read this list

This is a transparency list of current service categories and identified products, reviewed on 8 October 2026. A plugin installed on our server is not automatically a separate data recipient. A vendor’s role can differ by service: processor, subprocessor or independent controller. This page is not a signed data processing agreement or a guarantee of a provider’s certification, location or transfer mechanism.

Hosting, security and website delivery

WordPress.com / Automattic provides hosting and associated website delivery, security and technical services. Those services can process requests, technical logs and stored site/account content as needed for their function. Jetpack features may add service-specific processing. Read Automattic’s privacy information and the applicable product terms.

Consent, measurement and communication

Complianz and the WordPress Consent API manage browser consent choices. Google Analytics, connected through Site Kit, provides optional audience measurement; see Google Privacy. Jetpack statistics is a separate optional measurement product. Our first-party event measurement stores aggregate records in the website database.

Website contact and subscription records are handled through WordPress and the configured mail system; Icegram Express supports subscription administration. A software component is not evidence that every record is sent to its developer. Email can pass through delivery and mailbox providers. Ask us for the recipients relevant to a specific message or request.

AI and reporting

The public assistant’s external model connection is currently disabled; no connected model provider is represented as active. Browser voice features may use your browser’s speech provider. Internal aggregate reporting uses the connected ChatGPT workflow; see OpenAI Privacy. This is separate from a visitor submitting a private workspace dataset to an AI model.

New connections and business processing

Before enabling a new data integration, its notice should identify purpose, data fields, recipient, permissions, retention and deletion route. A private API key is not a user consent mechanism. If Markaigen is to process personal data on a business customer’s behalf, the parties must first determine roles and agree an appropriate Article 28 arrangement, including the relevant subprocessors and transfer safeguards. Contact info@markaigen.com before sending such data.