OnceAsked Subprocessors

OnceAsked maintains a subprocessor list describing provider role, processing purpose, and applicable region.

Material subprocessor changes are communicated through admin channels and policy updates.

Stripe, Inc. (United States) — payment processing, subscription billing, and fraud prevention. Stripe collects and processes payment card data directly through its own PCI DSS Level 1 certified systems; OnceAsked never receives or stores full card numbers or card authentication data. See Stripe's privacy policy at https://stripe.com/privacy.

All subprocessors are subject to contractual data protection and confidentiality obligations.

Access to customer-related data is scoped to required operations under least-privilege principles.

OnceAsked, Inc. is a Delaware C Corporation headquartered in New York City, NY 10001.

For legal matters, contact legal@onceasked.com. For all other matters, contact support@onceasked.com.

OnceAsked does not sell personal information under any circumstances.

We only share information with trusted partners when expressly permitted by contract, administrator configuration, or user instruction.