Legal
Subprocessors
Third parties that process customer data on behalf of the operator, and the advertising vendors that receive events only when a customer configures them as a destination.
Last updated: 2026-09-03 · Customers are notified 30 days before changes.
Processors engaged by the operator
| Provider | Purpose | Region | Transfer basis |
|---|---|---|---|
| Amazon Web Services EMEA SARL | Hosting, database, queue, object storage, KMS (eu-central-1) | EU (Frankfurt) | DPA + SCC |
| Stripe Payments Europe Ltd. | Subscription billing and invoices | EU / US | DPA + SCC / DPF |
| OpenAI Ireland Ltd. | Setup assistant (Responses API, zero data retention, no training) | EU / US | DPA + SCC / DPF |
| Resend, Inc. or the configured SMTP provider | Transactional e-mail | EU / US | DPA + SCC |
| Advertising and analytics vendors selected by the customer | Event delivery per configured destination | per destination (shown in the wizard) | customer's own contract with the vendor |
Destination vendors (customer-selected)
Each destination shows its data recipient, region and transfer basis in the setup wizard. Data reaches a vendor only for destinations you enable, only with the consent purpose the destination requires.
- Meta Ads (Facebook & Instagram)
- Google Ads & YouTube Ads
- Google Analytics 4
- TikTok Ads
- Microsoft Advertising
- LinkedIn Ads
- Reddit Ads
- Pinterest Ads
- Snapchat Ads
- X Ads (Twitter)
- Taboola
- Outbrain
- Amazon Ads & DSP
- Spotify Ads
- Quora Ads
- Yahoo DSP
- The Trade Desk
- Google Marketing Platform
- AdRoll
- Criteo
- Affiliate & performance networks