Sub-processors
Draft register · compiled from the product’s code on 2026-10-09 · Data Processing Terms (draft) · Terms of Service
Draft pending counsel review. Highlighted items are open decisions, not final terms.
This page lists the service providers that PlugMySite’s software is built to send data to. Whether a given provider is switched on depends on how the service is configured and which features a customer uses. [PLACEHOLDER-FOR-COUNSEL: statement of how and when customers are told about a new or replaced sub-processor, and any objection right]
Core and optional providers
| Provider | What it does for the service | Personal data involved | When it is used | Location and safeguards |
|---|---|---|---|---|
| Stripe | Card payments: Checkout for PlugMySite products and subscriptions, and connected accounts for merchants who take payments with PlugMySite. | Payer name, email and billing details, order amounts, and card details entered on the provider’s own form; merchant business and bank details entered during hosted onboarding. | When configured or the feature is on | [PLACEHOLDER-FOR-COUNSEL: processing location and transfer mechanism for Stripe] |
| Helcim | Optional card processor a merchant can use with their own API token (bring-your-own keys). | Transaction amounts and payer details sent to create and read card transactions; the merchant’s API token is stored encrypted. | Only if the customer connects their own account | [PLACEHOLDER-FOR-COUNSEL: processing location and transfer mechanism for Helcim] |
| Twilio | Text messages (order and queue notices, STOP handling). | Phone numbers and message text. | When configured or the feature is on | [PLACEHOLDER-FOR-COUNSEL: processing location and transfer mechanism for Twilio] |
| OpenAI | Reads receipts and documents a customer uploads (OCR) when that feature is used. | The uploaded image or document and the text read from it. | When configured or the feature is on | [PLACEHOLDER-FOR-COUNSEL: processing location and transfer mechanism for OpenAI] |
| Anthropic | AI drafting, insights and agents (the agent features call Anthropic directly). | The text and the business data a customer’s agent or insight feature sends in the prompt. | When configured or the feature is on | [PLACEHOLDER-FOR-COUNSEL: processing location and transfer mechanism for Anthropic] |
| Vercel | Hosting and delivery of the PlugMySite application, serverless functions, scheduled jobs, and page-speed analytics; also the API PlugMySite calls when a customer deploys a site to their own Vercel account. | Everything the application processes while it runs (requests, logs); visitor IP addresses and page metrics for analytics. | Core service | [PLACEHOLDER-FOR-COUNSEL: processing location and transfer mechanism for Vercel] |
| Turso (libSQL) | The production database: accounts, orders, bookings, POS records, consent records and the other data the application stores. | All application records, including business customer and contact details a merchant stores. | Core service | [PLACEHOLDER-FOR-COUNSEL: processing location and transfer mechanism for Turso (libSQL)] |
| Brevo | Transactional and marketing email delivery. | Recipient email address, sender details, subject and message content. | When configured or the feature is on | [PLACEHOLDER-FOR-COUNSEL: processing location and transfer mechanism for Brevo] |
| Resend | Alternative email delivery provider. | Recipient email address, sender details, subject and message content. | When configured or the feature is on | [PLACEHOLDER-FOR-COUNSEL: processing location and transfer mechanism for Resend] |
| Sentry | Error and performance monitoring on the server and in the browser. | Error messages and stack traces, request paths, and a hashed user reference. The server scrubs known sensitive fields before sending; the browser loader is a separate vendor script. | When configured or the feature is on | [PLACEHOLDER-FOR-COUNSEL: processing location and transfer mechanism for Sentry] |
| Website scans (PageSpeed Insights and Safe Browsing), place and map lookups, sign-in token verification (Firebase Authentication), and web fonts. | The public website address being scanned; place search text; sign-in tokens; the visitor’s IP address when fonts load from Google’s servers. | When configured or the feature is on | [PLACEHOLDER-FOR-COUNSEL: processing location and transfer mechanism for Google] | |
| Cloudflare Turnstile / hCaptcha / Google reCAPTCHA | Bot challenge on sensitive forms, when a challenge provider is configured. | The visitor’s IP address, browser details and challenge interaction signals. | When configured or the feature is on | [PLACEHOLDER-FOR-COUNSEL: processing location and transfer mechanism for Cloudflare Turnstile / hCaptcha / Google reCAPTCHA] |
| GoDaddy | Domain search, registration and renewal for customers who buy a domain through PlugMySite. | Domain name and the registrant contact details needed to register or renew it. | When configured or the feature is on | [PLACEHOLDER-FOR-COUNSEL: processing location and transfer mechanism for GoDaddy] |
| UptimeRobot | Checks the web addresses and scheduled jobs a customer adds to the monitoring feature. | The web addresses and job URLs a customer adds, and the alert contact addresses. | When configured or the feature is on | [PLACEHOLDER-FOR-COUNSEL: processing location and transfer mechanism for UptimeRobot] |
| Meta (Instagram Graph API) | Reads a customer’s Instagram account when the customer connects it. | The access token the customer grants and the Instagram content it covers. | Only if the customer connects their own account | [PLACEHOLDER-FOR-COUNSEL: processing location and transfer mechanism for Meta (Instagram Graph API)] |
AI providers
Rows come from the AI router’s provider list. Only providers marked as allowed to receive a customer’s business data are used for it; the others are used for public information only. The retention and training terms of each AI provider have not been verified, so this page makes no promise about them, and no business associate agreement exists with any AI, email or SMS provider.
| Provider | What it does for the service | Personal data involved | When it is used | Location and safeguards |
|---|---|---|---|---|
| Groq | AI features that only use public information (scanning a public website, marketing copy, the public chatbot). Not used for a customer’s business data. | Public website content and prompts that contain no customer business data. | When configured or the feature is on · public-data calls only | [PLACEHOLDER-FOR-COUNSEL: processing location and transfer mechanism for Groq] |
| Cerebras | AI features that only use public information (scanning a public website, marketing copy, the public chatbot). Not used for a customer’s business data. | Public website content and prompts that contain no customer business data. | When configured or the feature is on · public-data calls only | [PLACEHOLDER-FOR-COUNSEL: processing location and transfer mechanism for Cerebras] |
| OpenRouter (free models) | AI features that only use public information (scanning a public website, marketing copy, the public chatbot). Not used for a customer’s business data. | Public website content and prompts that contain no customer business data. | When configured or the feature is on · public-data calls only | [PLACEHOLDER-FOR-COUNSEL: processing location and transfer mechanism for OpenRouter (free models)] |
| OpenRouter (paid models, data collection denied) | AI features that work on a customer’s own business data (drafts, summaries, assistants). | The prompt and the rows of business data the feature needs, after names and typed identifiers are masked where the code can do so. | When configured or the feature is on · may receive customer business data | [PLACEHOLDER-FOR-COUNSEL: processing location and transfer mechanism for OpenRouter (paid models, data collection denied)] |
| Hugging Face | AI features that only use public information (scanning a public website, marketing copy, the public chatbot). Not used for a customer’s business data. | Public website content and prompts that contain no customer business data. | When configured or the feature is on · public-data calls only | [PLACEHOLDER-FOR-COUNSEL: processing location and transfer mechanism for Hugging Face] |
| Together AI (free models) | AI features that only use public information (scanning a public website, marketing copy, the public chatbot). Not used for a customer’s business data. | Public website content and prompts that contain no customer business data. | When configured or the feature is on · public-data calls only | [PLACEHOLDER-FOR-COUNSEL: processing location and transfer mechanism for Together AI (free models)] |
| Cloudflare Workers AI | AI features that only use public information (scanning a public website, marketing copy, the public chatbot). Not used for a customer’s business data. | Public website content and prompts that contain no customer business data. | When configured or the feature is on · public-data calls only | [PLACEHOLDER-FOR-COUNSEL: processing location and transfer mechanism for Cloudflare Workers AI] |
| Ollama (operator-run, only if OLLAMA_URL is set) | AI features that work on a customer’s own business data (drafts, summaries, assistants). | The prompt and the rows of business data the feature needs, after names and typed identifiers are masked where the code can do so. | When configured or the feature is on · may receive customer business data | [PLACEHOLDER-FOR-COUNSEL: processing location and transfer mechanism for Ollama (operator-run, only if OLLAMA_URL is set)] |
Services a customer connects themselves
A customer can choose to deploy a site to their own GitHub, Netlify or Vercel account, or to use their own AI key. Those are the customer’s own accounts and agreements; PlugMySite sends them only what the customer asks it to.
Changes to this list
[PLACEHOLDER-FOR-COUNSEL: notice period, notification method and objection process for sub-processor changes]