Subprocessors
These are the third parties we use to process personal data on a merchant’s behalf. This page is the current list referred to by section 4 of our Data Processing Agreement. Each subprocessor is bound by data protection terms no less protective than ours, and we remain liable for their performance.
Current subprocessors
| Subprocessor | Purpose | Location |
|---|---|---|
| Anthropic | AI drafts, summaries, triage, tagging | United States |
| Mailgun | Inbound and outbound email | United States |
| Shopify | Order and customer reads | United States / Canada |
| Meta Platforms | Instagram direct messages | United States |
| Cloudflare | TLS termination, CDN, WAF; object storage (R2) for email attachments | Global edge; attachment storage in North America |
| ReliableSite | Hosting of application, database and cache | United States |
Changes to this list
You give general authorisation for us to engage subprocessors. We will give you reasonable advance notice before adding or replacing one. To be notified, email privacy@helpme.social and we will add you to the notification list.
If you reasonably object on data protection grounds, tell us within the notice period. If we cannot offer a reasonable alternative, you may terminate the affected part of the service.
What each one receives
Not every subprocessor sees the same data. Anthropic receives conversation content and order context in order to draft and classify replies, and we do not store prompts or completions. Mailgun handles the email itself, so it sees message bodies, addresses and headers. Shopify is read-only for orders and customer records. Meta handles Instagram messages only. Cloudflare terminates TLS, so it sees traffic in transit, and its R2 storage holds files sent to a merchant by email (attachments) at rest; it does not retain message text. ReliableSite hosts the database, so it holds the data at rest.