Subprocessors

Public Provider Disclosure

This page is public and does not require login. Providers receive only the data needed for the relevant Mojo White feature, and not every provider receives data from every user.

The table is a transparency list, not a complete infrastructure diagram. Haro LLC may omit internal systems, professional advisors, or emergency providers where disclosure would create security risk, but the named providers below cover the ordinary service-provider categories used to run Mojo White.

How Providers Are Used

• Core infrastructure providers host the app, database, files, jobs, logs, and security controls.
• Authentication and payment providers process account access, subscriptions, invoices, refunds, chargebacks, App Store entitlements, and purchase reconciliation.
• AI, OCR, and text-to-speech providers process only the content needed for the feature selected by the user, such as document excerpts, extracted text, prompts, generated scripts, voice selections, or synthesis requests.
• Import providers process files and metadata only when the user chooses to connect or import from that provider.
• Analytics and reliability providers process analytics, operational telemetry, performance data, and aggregate interaction metrics unless an applicable opt-out has been processed.
• Security providers may process tokens, file hashes, suspicious files, IP-derived risk signals, or abuse indicators to protect Mojo White and users.

Data Minimization and Access

Provider access is limited by feature, purpose, role, and environment where Mojo White controls the integration. Not every provider sees every category of data, and not every user uses every provider-backed feature.

Haro LLC treats provider owner, purpose, data categories, region, DPA status, transfer safeguards, retention settings, incident contacts, and review dates as vendor-management records.

Provider Terms and Changes

Some third-party services are user-selected integrations governed by that provider's own terms. Mojo White is not responsible for a third-party provider's independent products, policies, outages, or account decisions.

Haro LLC may add, replace, suspend, or remove providers as the product evolves. Material changes that expand provider access to personal information will be reflected on this page and, where legally required, communicated through additional notice.

Change Notifications

Users may email help@mojowhite.com with the subject line Subprocessor Updates to request email notice when the named subprocessor list materially changes.

Where contractually feasible and legally appropriate, Haro LLC will provide at least 30 days' notice before adding a material new subprocessor category that expands access to personal information.

The public provider table includes a last-reviewed date so users can see when the named list was last checked.

International Transfers and DPAs

Providers may process personal information in the United States or other countries. For EU/UK data, Haro LLC relies on Standard Contractual Clauses, UK transfer addenda, adequacy-transfer records, or other valid safeguards where required.

Haro LLC uses DPAs or equivalent data-processing terms for providers that process personal information on Mojo White's behalf where such terms are available and appropriate.