The Leap Sub-processors

The Leap  uses certain sub-processors and content delivery networks to assist with the interoperability of the The Leap services. Capitalized terms used and not otherwise defined below will have the meanings given to such terms in our Terms of Service.

What Is a Sub-processor?

A sub-processor is a third-party data processor engaged by The Leap, who has or potentially will have access to or process User Data (which may contain personal data). The Leap engages different types of sub-processors to perform various functions as explained in the tables below. The Leap refers to third parties that do not have access to or process User Data, but who are otherwise used to provide the Services, as “subcontractors” and not sub-processors.

Due Diligence

The Leap applies a commercially reasonable selection process by which it evaluates the security, privacy, and confidentiality practices of proposed sub-processors that will or may have access to or process User Data.

Contractual Safeguards

The Leap requires its sub-processors to satisfy equivalent obligations as those required from The Leap (as a Controller) as set forth in The Leap’s Terms of Service, including but not limited to the requirements to:

  • in connection with their sub-processing activities, use only personnel who are reliable and subject to a contractually binding obligation to observe data privacy and security, to the extent applicable, pursuant to applicable data protection laws;
  • provide regular training in security and data protection to personnel to whom they grant access to personal data;
  • implement and maintain appropriate technical and organizational measures (including measures consistent with those to which The Leap is contractually committed to adhere insofar as they are equally relevant to the sub-processor’s processing of personal data on The Leap’s behalf)
  • promptly inform The Leap about any actual or potential security breaches; and cooperate with The Leap in order to facilitate requests from data controllers, data subjects, or data protection authorities, as applicable.

This notice does not give User’s any additional rights or remedies and should not be construed as a binding agreement. The information herein is to provide the actual list of third-party sub-processors and content delivery networks used by The Leap as of the date of this notice (which The Leap may use in the delivery and support of its Services).

Infrastructure Sub-processors – User Data Storage

The Leap controls access to the infrastructure that The Leap uses to host User Data submitted to the Services, other than as set forth below. Currently, the The Leap production systems for the The Leap Platform are located in co-location facilities in the United States. Users may be shifted among data centers within a region to promote performance and availability of the Services. The following table describes the countries and legal entities engaged in the storage of User Data by The Leap.

Entity NameEntity TypeEntity CountryLegal Safeguard
Cloudflare, Inc.Cloud Service ProviderUnited StatesData Processing Agreement with Standard Contractual Clauses
HerokuCloud Service ProviderUnited StatesData Processing Agreement with Standard Contractual Clauses
WordPress, Inc.Cloud Service ProviderUnited StatesData Processing Agreement with Standard Contractual Clauses

Service Specific Sub-processors

The Leap works with certain third parties to provide specific functionality within its services. These providers are the sub-processors set forth below. In order to provide the relevant functionality these sub-processors access User Data. Their use is limited to the indicated Services.

Entity NamePurposeApplicable ServicesEntity CountryLegal Safeguard
Gravity FormsForm tool to collect newsletter subscriptions and contact informationThe Leap MarketingUnited StatesData Processing Agreement with Standard Contractual Clauses
GTM (Google Tag Manager and Analytics)User event tracking for product optimizationsThe Leap ServiceUnited StatesData Processing Agreement with Standard Contractual Clauses
HubspotProvides lead qualification, personalized experience, and emails for The Leap customersThe Leap MarketingUnited StatesData Processing Agreement with Standard Contractual Clauses
Lucky OrangeUser session recordings for product optimizationsThe Leap ServiceUnited StatesData Processing Agreement with Standard Contractual Clauses
MailgunEmail delivery service to send transactional emails to The Leap usersThe Leap ServiceUnited StatesData Processing Agreement with Standard Contractual Clauses
MixpanelUser event tracking for product optimizationsThe Leap ServiceUnited StatesData Processing Agreement with Standard Contractual Clauses
SentryError monitoring tool with session replay The Leap ServiceUnited StatesData Processing Agreement with Standard Contractual Clauses
StripePayment processor for The Leap’s users and for The LeapThe Leap ServiceUnited StatesData Processing Agreement with Standard Contractual Clauses
TypeformForm tool to collect contact information for interested partnershipsThe Leap MarketingSpainData Processing Agreement with Standard Contractual Clauses
ZapierWorkflow Automation toolThe Leap Marketing United StatesData Processing Agreement with Standard Contractual Clauses
ZendeskTool to provide learning resources to users in the app and respond to customer service requestsThe Leap ServiceUnited StatesData Processing Agreement with Standard Contractual Clauses
LaunchDarklyA feature management platform that enables the rollout of features and updates in the software applications.The Leap ServiceUnited StatesData Processing Agreement with Standard Contractual Clauses

Content Delivery Networks

As explained above, The Leap’s Services may use content delivery networks (“CDNs”) to provide the Services, for security purposes, and to optimize content delivery. CDNs do not have access to User Data, but are commonly used systems of distributed services that deliver content based on the geographic location of the individual accessing the content and the origin of the content provider. Website content served to website visitors and domain name information may be stored with a CDN to expedite transmission, and information transmitted across a CDN may be accessed by that CDN to enable its functions. The following describes the use of CDNs by The Leap’s Services.

CDN
Provider
Services Using CDNCDN LocationDescription of
CDN Services
Legal Safeguard
Cloudflare, Inc.The Leap ServiceGlobalPublic website content served to website visitors may be stored with Cloudflare, Inc., and transmitted by Cloudflare, Inc., to website visitors, to expedite transmission.Data Processing Addendum with Standard Contractual Clauses
`

As of April 11th, 2024

address-book-iconai-assistant-iconarrow-rightblue-ai-assistant-iconblue-automated-email-flows-iconblue-contacts-dashboard-iconblue-landing-pages-iconcaret-down-browncaret-downcheckout-iconclosecustomer-dashboard-iconemail-capture-iconemail-marketing-iconexclamation-markfacebook-squaregear-icongreen-export-contacts-icongreen-links-icongreen-mobile-first-formats-icongreen-powered-by-stripe-iconhamburgerheadset-iconicon-instagramicon-pinteresticon-search-transparenticon-searchicon-tiktokicon-youtubeinstagram-squarelanding-page-iconlead-magnet-iconlink-iconlink-in-bio-iconlinkedin-squarelist-buttonmobile-product-builder-iconpalette-iconpaper-plane-iconpausepencil-ruler-iconpink-embedded-upsells-iconpink-no-revenue-share-fees-iconpink-theme-builder-iconplayquestion-markshare-iconshopping-bag-iconstartemplates-icontiktoktwitter-squareyellow-1-click-payment-iconyellow-custom-store-iconyellow-email-broadcasts-iconyellow-mix-and-match-cards