Subprocessors
Every third party that touches customer data, what they do with it, and what we would tell you before adding another.
The list
Three, and we would rather keep it that way. Each operates under a data processing agreement with the same obligations we owe you.
- Meta Platforms
- Message delivery on WhatsApp, Instagram and Messenger. Receives message content, the recipient’s phone number or account handle, and delivery status. This one is not a choice: it is the channel you signed up to use, and no messaging platform can route a WhatsApp message without it.
- Our cloud infrastructure provider
- Application hosting, the managed database and the object storage holding attachments (so, in practice, everything RelayPlus stores). Named to customers under NDA on request; we do not publish which one, and you should weigh that when you assess us.
- Google Workspace. Transactional email (sign-in links, workspace invitations, account notices and demo booking emails) plus, for a demo booked on relayplus.app, the calendar event and Google Meet link. Receives the recipient’s email address and the contents of that email, and for a demo booking the booker’s name, email, company, mobile number, time zone and the campaign details that brought them. No conversation data, no contact records, no attachments.
Our marketing website
Google also receives visits to relayplus.app through one tag, which runs only as your cookie choice allows and receives nothing from the product itself:
This service receives visits to relayplus.app only; it is not a subprocessor of your workspace data, so the objection process in “Adding one” does not apply to it.
- Google: Google Analytics measures visits to relayplus.app; Google may also use this data under its own policies (https://policies.google.com/technologies/partner-sites).
What we do not use
Worth stating, because an earlier version of our privacy policy named four companies that never received anything, and a subprocessor list is only useful if it is exact.
- No payment processor. Wallet balances are recorded directly and no card data exists to share.
- RelayPlus has no AI features, and nothing is sent to any AI model provider.
- No support or CRM tool holding your conversations. Support runs on the same email address published here.
Adding one
We will post the change here and email every workspace owner at least 30 days before a new subprocessor begins processing. If you object within that window, tell us and we will either exclude your workspace where that is technically possible or let you terminate for the remainder of your term with a pro-rata refund. That is a real commitment and not a formality, but be aware that objecting to Meta means objecting to the product working at all.
Where processing happens
Meta Platforms, our cloud infrastructure provider and Google (the three subprocessors in “The list” above) operate in and transfer data across multiple jurisdictions. Transfers out of the EEA and the UK rely on the European Commission’s Standard Contractual Clauses. We do not currently offer a choice of data region, and we will say so here before that changes.
Questions
Write to [email protected]. Data processing agreements, subprocessor terms and the identity of our infrastructure provider are available to customers on request, under NDA for the last of those.