Subprocessors
Last updated October 16, 2026
This document is a working draft being reviewed by counsel. Text in [square brackets] is still to be confirmed. It is not legal advice.
BizzieBot uses the following providers to run the Service. We will update this list, and give notice to account owners, before adding one that handles customer data.
Providers
| Provider | Purpose | Data | Where |
|---|---|---|---|
| Vercel | Hosts the application and its servers | Everything sent to the app while it is used (in transit); server logs | United States |
| Neon | Managed Postgres database | Account records, contacts, customer messages, chat history, audit log | United States |
| Resend | Sends email: password reset links, notices | Recipient email address and message text | United States |
| Cloudflare (R2 storage) | File storage for uploaded files such as invoices and photos, when that feature is used | The files a business uploads | United States |
| Google (Drive) | Connects a business's own Google Drive when the business chooses to | Only the files and folders the business authorizes | As chosen by the business |
| An inbound email service (for example Postmark, Mailgun or SendGrid), when a business turns on email invoices | Receives invoices emailed to a business's invoice address and passes them to BizzieBot | The email, its sender and its attachments | United States |
| Open Food Facts (optional) | Suggests a product name when a barcode is scanned | The barcode number only | France |
| Stripe | Subscription billing and payments, when billing is turned on | Billing contact, plan, payment method (held by Stripe, not by us) | United States |
| The business's own AI provider (for example Anthropic or OpenAI), or an AI agent such as Hermes running on the business's own computer | Reads and drafts text for Pippy, the assistant. The business chooses it and supplies its own key | The messages sent to Pippy and the facts needed to answer them | As chosen by the business |
| A phone or messaging provider (for example Twilio), when the business connects one | Delivers calls, voicemail transcripts and texts to the Receptionist | Caller numbers, transcripts, message text | As chosen by the business |
| Point-of-sale and accounting integrations the business connects (for example Square) | Import sales and sync data at the business's direction | What the business authorizes | As chosen by the business |
Notice of changes
Account owners are told by email at least [30] days before a new subprocessor starts to handle their data. Contact [privacy email address] to object.