Sub-processors
Last updated: 3 July 2026
We engage the third parties below to process personal data on our behalf in order to provide the Service. Each is bound by data-protection terms consistent with our Data Processing Agreement. We update this list when a sub-processor is added or removed.
| Sub-processor | Purpose | Data | Location |
|---|---|---|---|
| Xendit | Payment processing for subscription billing | Billing contact email, transaction + invoice metadata | Indonesia / Southeast Asia |
| Meta Platforms | WhatsApp Business Cloud API, Conversions API, and Meta Pixel (when the customer enables WhatsApp or ad tracking) | Recipient phone numbers, message content, conversion events | Ireland / United States |
| Google Analytics 4 / Tag Manager on published landing pages (when the customer enables analytics) | Visitor device + usage events (pseudonymous) | United States | |
| Cloudflare | CDN, TLS, and privacy-friendly web analytics for published pages | Request metadata (IP, user agent) for delivery + security | United States / global edge |
| Email delivery provider (customer-configured) | Sending transactional + marketing email. The customer selects and configures their own provider (e.g. SendGrid, Mailgun, Amazon SES, SMTP2GO, sender.net, or their own SMTP server) | Recipient email addresses, message content, delivery events | Depends on the provider the customer configures |
| Hosting infrastructure provider | Primary compute, database, and object storage that run the Service | All Service data, encrypted at rest and in transit | As stated in your order form / DPA schedule |
| Sentry (Functional Software, Inc.) | Error and performance monitoring for the application itself. Crash/error reporting is always on (operational, necessary to run the Service securely); performance tracing only runs if you consent to analytics cookies in the cookie banner | Stack traces, request/browser metadata, IP address — not your Customer Data | United States |
This list is a template that reflects the platform’s integrations. It is not legal advice; confirm the specific entities, regions, and transfer mechanisms with counsel and keep it current.