Subprocessors
Last updated 2026-10-24
A subprocessor is a third party that may process data on Zetra's behalf to operate the Service. This list splits them into two genuinely different categories, because they carry different responsibility.
Platform subprocessors
These are engaged by Zetra itself — your content may flow to them regardless of which integrations you personally set up, because they're part of how the core product works.
| Subprocessor | Purpose | Location |
|---|---|---|
| Hetzner Online GmbH | Hosts the application, its database and backups. | Helsinki, Finland (EU) |
| OpenAI | Embeddings for every agent (always), and chat responses when an OpenAI model is selected. | United States |
| Anthropicoptional | Chat responses, only if the workspace has configured a Claude model and an Anthropic API key. | United States |
| Google (Generative AI)optional | Chat responses, only if the workspace has configured a Gemini model and a Google API key. | United States |
| Google OAuthoptional | Sign-in, only if you use "Continue with Google" instead of a password. | United States |
| Paystack | Payment processing for paid plans and add-ons (cards, and M-PESA for one-time purchases), and, for merchants who connect their Paystack account, card and M-PESA payments their shoppers make in chat. | |
| Safaricom M-PESA | M-PESA payments shoppers make in chat: the shopper's phone number and the amount are sent to the merchant's own M-PESA (Daraja) app to request the payment. | |
| PayPaloptional | Payment processing for plans and add-ons paid with PayPal (in US dollars), only if you choose to pay with PayPal. | United States / EU (Luxembourg) |
| Resend | Delivers transactional and notification email (password resets, invitations, helpdesk replies, daily summaries). | United States |
| Google (Gmail) | Delivers messages sent through our contact form to our support mailbox. | United States |
| Cloudflare | DNS, network security and traffic proxying for our sites, and email routing for inbound support mail. | Global network (US company) |
Transfers to providers outside the EU rely on Standard Contractual Clauses; see the GDPR page and section 6 of the DPA.
Integrations you control
These only receive data if you connect them, using your own account and credentials. Data flows directly between Zetra and that third party on your behalf — Zetra isn't a party to your relationship with them, and disconnecting the integration stops the data flow immediately.
- Twilio — WhatsApp and Voice channels, using the Twilio account and credentials you provide.
- Slack — Notification webhooks, using the Slack webhook URL you provide.
- Zendesk — Ticket escalation, using the Zendesk credentials you provide.
- HubSpot — Contacts and ticket escalation, using the HubSpot account you connect.
- Shopify — Order/product lookups, using the Shopify credentials you provide.
- Notion — Pulling in source content, using the Notion integration token you provide.
- SendGrid (or compatible) — Inbound email parsing, only if you point your own SendGrid inbound-parse webhook at this deployment.
Changes to this list
If we add or remove a platform subprocessor, we'll update this page and the "Last updated" date above. For material changes, we'll also notify workspace owners directly where required.