Subprocessors
The companies that help us run Open Motives and may process personal data for our customers.
About this list
A subprocessor is a company we engage that may process personal data our customers put into Open Motives, under our Data Processing Addendum. Each one may use the data only to provide its service to us, under data protection terms at least as protective as ours. Some are only used when a feature is switched on; the last column says when.
We tell customers before a new subprocessor starts processing their data. To be told by email, write to [Contact email: not set (LEGAL_CONTACT_EMAIL)].
Current subprocessors
| Subprocessor | What for | Personal data | Location | When it's used |
|---|---|---|---|---|
| [Hosting provider: owner to fill] | Servers that run the application, database, cache and background workers | All data stored in the service | [Country / region: owner to fill] | Always |
| [Backup storage provider: owner to fill] | Encrypted nightly database backups kept off the main server | All data stored in the service (encrypted before upload) | [Country / region: owner to fill] | Always |
| [Object storage provider: owner to fill, if used] | Storage for uploaded media and files | Uploaded media, attachments, exports | [Country / region: owner to fill] | Only when media are kept in S3-compatible storage instead of on the server |
| Mailgun Technologies, Inc. | Sending account, notification and report emails; receiving forwarded email for email inboxes; bounce and complaint reports | Recipient addresses, email content, delivery events | [United States or EU region: owner to confirm] | Always (email); forwarding only when an email inbox uses it |
| [Email sending provider in use, if not Mailgun: owner to fill — Google Workspace, Zoho (Zoho Mail / ZeptoMail) or an SMTP service] | Sending account, notification and report emails (chosen in the operator console) | Recipient addresses, email content | [Country / region: owner to fill] | Only when another email provider is chosen in the operator console |
| Stripe, Inc. / Stripe Payments Europe, Ltd. | Subscription payments, invoices, card handling | Billing contact, billing address, payment details (held by Stripe, never by us) | United States / Ireland | When a paid plan or add-on is bought |
| Lemon Squeezy, LLC | Subscription and add-on checkouts as merchant of record (the seller on the customer's invoice) | Billing contact, billing address, payment details, tax details (held by Lemon Squeezy, never by us) | United States | When Lemon Squeezy is the payment provider of a paid plan or add-on |
| Paddle.com Market Ltd (Paddle) | Subscription and add-on checkouts as merchant of record (the seller on the customer's invoice) | Billing contact, billing address, payment details, tax details (held by Paddle, never by us) | United Kingdom | When Paddle is the payment provider of a paid plan or add-on |
| Functional Software, Inc. (Sentry) | Error monitoring | Technical data about errors; personal data and credentials are scrubbed before sending | United States | When error monitoring is switched on |
| AI model provider chosen by us (e.g. OpenAI, Anthropic, Google, OpenRouter, Mistral, DeepSeek, xAI, Groq, Microsoft Azure, Amazon Bedrock) | AI features on our included AI credits: replies, AI Employees, captions, summaries, insights, repurposing, clip transcription | The text (and for clips, audio) sent for that request: messages, posts, contact fields the feature uses | [Depends on the configured provider: owner to list the one in use] | Only when you use AI features without your own key |
| Exa Labs, Inc. / Brave Software, Inc. / Tavily (the one configured) | Web search for AI Employees and AI workflow steps | Search queries, with email addresses, phone and card numbers removed | United States | Only when an AI Employee or AI step searches the web |
| Composio, Inc. | Connecting AI agents to other apps you choose (e.g. a CRM or calendar) | What the agent sends to and reads from the connected app | United States | Only when you connect apps for AI agents |
| [Tracing provider: owner to fill, if used] | Tracing of AI agent runs for debugging | Timing and metadata; prompt content only if switched on | [Country / region: owner to fill] | Only when AI tracing is configured |
| Browser push services (Google, Mozilla, Apple, Microsoft) | Delivering push notifications you turned on | Encrypted notification payloads | Global | Only on devices where you turned on push notifications |
| [Intelligence service operator: owner to fill, if used] | Optional video and content scoring | Media and captions you send for scoring | [Country / region: owner to fill] | Only when the Intelligence integration is switched on |
Services you connect yourself
These services are not our subprocessors. You connect them with your own account, under your own agreement with them, and we exchange data with them only to do what you ask (publish, read messages, send SMS, run a workflow step and so on). Their own privacy terms apply.
| Service | Used for |
|---|---|
| Meta (Facebook, Instagram, Messenger, WhatsApp Business, Threads, Meta Ads) | Publishing, messages, comments, ads, analytics |
| Google (YouTube, Google Business Profile, Gmail, Google Sheets, Google Drive) | Publishing, reviews, email inbox, workflow steps, media import |
| TikTok | Publishing and analytics |
| X (Twitter) | Publishing and analytics |
| Publishing and analytics | |
| Publishing | |
| Bluesky and Mastodon | Publishing and analytics |
| Telegram | Messages |
| Twilio (your own account) | SMS and MMS |
| Microsoft 365 / Outlook | Email inbox |
| Your own IMAP / SMTP mail server | Email inbox |
| Zoho Mail | Email inbox |
| Your own outgoing mail server (SMTP, Google Workspace, Zoho) | Client emails sent on your brand |
| Shopify | Store data for contacts |
| HubSpot | Workflow steps |
| Canva and Dropbox | Media import |
| Your own AI provider key (BYOK) and your own MCP servers | AI features on your key / tools you add |
Changes
Last updated: [Effective date: not set (LEGAL_EFFECTIVE_DATE)].