Subprocessors

Effective date: January 1, 2026

This page describes the third-party service providers (“Subprocessors”) that QCarder (owned by ASTROSIST Inc.) (“QCarder”, “we”, “us”) engages to help deliver, maintain, and improve our services.

A Subprocessor is a third party that processes Personal Data on behalf of QCarder in connection with the services we provide to our customers (the “Controller”), as described in our Data Processing Agreement (DPA).

By using QCarder, you acknowledge and agree that QCarder may engage the Subprocessors listed below in accordance with our DPA and applicable data protection laws (including GDPR, where applicable).

1. How We Use Subprocessors

We use Subprocessors to provide infrastructure, hosting, analytics, communications, payment processing, and support services. Each Subprocessor only processes Personal Data to the extent necessary to perform the services we have contracted them for.

QCarder:

• enters into written data processing agreements with each Subprocessor;
• requires Subprocessors to implement appropriate technical and organisational measures to protect Personal Data; and
• remains responsible to our customers for the performance of our Subprocessors, as set out in our DPA.

2. Current List of Subprocessors

Below is the list of Subprocessors QCarder may use to process Personal Data on behalf of customers:

3. Changes to Our Subprocessors

We may update this Subprocessor list from time to time, for example when:

• we add a new Subprocessor to support new features or infrastructure; or
• we replace an existing Subprocessor.

• notify customers of any intended addition or replacement of a Subprocessor (for example, by email, in-app notice, or by updating this page); and
• provide customers with a right to object on reasonable data protection grounds, as described in our DPA.

4. More Information

For more details about how we process Personal Data, please refer to:

• our Privacy Policy; and
• our Data Processing Agreement (DPA).