Version 1.6. Effective July 30, 2026.
English · Español · Français · Português
SmileMaxer LLC uses the following subprocessors to provide the ReadyMaxer service. We will update this page at least 15 days before adding or replacing a subprocessor that processes practice data (see the DPA).
| Subprocessor | Purpose | Data involved | Location |
|---|---|---|---|
| Google Cloud (Google LLC) | Hosting and infrastructure | All service data | United States |
| Apple Inc. (APNs) | Push notification delivery to Apple devices | Device push token. Default mode: room name, signal label, sender first name, no note. Discreet mode: only "New signal". If the practice turns on the note in push notifications: also the note | United States |
| Google LLC (FCM) | Push notification delivery to Android devices | Device push token. Default mode: room name, signal label, sender first name, no note. Discreet mode: only "New signal". If the practice turns on the note in push notifications: also the note | United States |
| Stripe, Inc. | Payments, subscriptions, invoices | Billing contact and payment details (card data is held by Stripe, never by us) | United States |
| Resend, Inc. | Transactional email delivery (new admin account confirmations, password resets, support ticket notifications) | Admin email address; email content (account-confirmation and reset links, support text) | United States |
| Cloudflare, Inc. (Turnstile) | Bot protection on web sign-in | Transient request and browser signals | United States (global network) |
| Google LLC (Play Integrity), Apple Inc. (App Attest) | App attestation on sensitive endpoints | Transient attestation tokens; nothing persisted | United States |
How much a push says is the practice's choice, not the recipient's, and every practice starts in the default mode, where no note is ever handed to Apple or Google. Only a practice admin can change it, in the admin portal's Settings page (Privacy Policy, Section 6).
Crash reports from the apps are not on this list. They go to our own servers only, no third party receives them, and one is uploaded only when the person holding the device agrees to that report (Privacy Policy, Section 2).
These run only on our public marketing pages and never inside the signed-in service. They are not subprocessors of practice data. The advertising and session tools load only if you accept them in the cookie banner. Google Analytics runs by default outside the EEA, the UK, and Switzerland, with an opt-out via the cookie banner, the "Privacy choices" footer link, or a Global Privacy Control signal; inside the EEA, the UK, and Switzerland it loads only after you accept (Privacy Policy, Section 4).
| Provider | Purpose |
|---|---|
| Meta Platforms, Inc. (Meta Pixel) | Advertising measurement (consent-based) |
| Google LLC (Google Ads) | Advertising measurement (consent-based) |
| Google LLC (Google Analytics) | Website usage analytics (default-on outside the EEA/UK/Switzerland with opt-out; consent-based inside) |
| Microsoft Corporation (Clarity) | Anonymized session analytics |
Questions or objections: legal@readymaxer.com.
Questions: legal@readymaxer.com · SmileMaxer LLC, 11 S Eutaw St, Apt 915, Baltimore, MD 21201, USA