Sub-Processor List
Last updated: 2026-08-25
A sub-processor is a third party that Peakify Hub Inc. (“Peakify”) engages to process customer data or end-user personal information on behalf of a customer in connection with the Peakify CX platform. This page lists every sub-processor we currently engage, what each one does, and where it processes data. It also sets out the notice we give before we add, remove, or replace one.
This page is incorporated by reference into our Data Processing Addendum and supplements our Privacy Policy. Where this page and the Data Processing Addendum disagree, the addendum controls.
1. Current sub-processors
| Sub-processor | Category | Purpose | Data location |
|---|---|---|---|
| Supabase, Inc. | Infrastructure | Managed Postgres database, authentication, file storage, and edge functions. The primary store of customer data. | United States |
| Vercel Inc. | Infrastructure | Application and website hosting, edge runtime, and aggregate, cookie-light site analytics. | United States, with global edge locations |
| Cloudflare, Inc. | Infrastructure | Private object storage (R2) for conversation attachments and uploaded files, delivered only through short-lived signed links, and the Turnstile bot check on public forms. | Global (Cloudflare network) |
| Upstash, Inc. | Infrastructure | Managed Redis used for rate limiting and short-lived caching on sign-in, signup, and AI endpoints. | United States |
| Functional Software, Inc. (Sentry) | Monitoring | Application error monitoring. Error reports can include request context; personal information is scrubbed before sending where possible. | United States |
| Stripe, Inc. | Payments | Payment processing, card tokenization, and subscription billing. Peakify never stores full card numbers. | United States and Canada |
| Telnyx LLC | Communications and AI | Voice and SMS carrier, phone numbers and 10DLC registration, voice AI including call recording and summaries where enabled, and Telnyx-hosted text models (Kimi-K2.6 and GLM-5.2) that serve as the primary AI provider for replies, message classification, and summaries. | United States |
| OpenAI | Artificial intelligence | Fallback AI provider for replies, classification, and summaries when the primary provider is unavailable, and content moderation on inbound messages. Not used to train OpenAI models. | United States |
| Anthropic, PBC | Artificial intelligence | Fallback AI provider, used only when the primary and secondary providers are unavailable. | United States |
| Chatwoot (self-hosted by Peakify) | Messaging | Open-source shared-inbox software that mirrors conversations for customers still using the Chatwoot inbox. Runs on a server Peakify rents from Elestio (listed below). | North America or Europe, per the server region Peakify selects |
| Elestio | Infrastructure | Managed hosting for the Chatwoot server above. Elestio operates the machine; Peakify operates the software on it. | North America or Europe, per the server region Peakify selects |
| Meta Platforms, Inc. | Messaging | WhatsApp Business Platform, Instagram Direct, and Facebook Messenger message delivery. Messaging channels only; Meta is not engaged for advertising. | United States and global |
| Mailgun Technologies, Inc. (a Sinch company) | Transactional email delivery: signup, billing, and system notifications. | United States | |
| Google LLC | Analytics and push notifications | Google Analytics 4 on public marketing pages where configured, and Firebase Cloud Messaging for mobile push notifications where enabled. | United States |
| Rewardful | Marketing | Affiliate referral tracking on the public marketing site, where enabled, so a signup can be credited to the partner who referred it. Loads only after a visitor accepts non-essential cookies. | United States |
This list reflects the sub-processors Peakify engages in the ordinary course of operating the platform. It does not include Peakify personnel or contractors, who are bound directly by confidentiality and security obligations. Transfers outside Canada are addressed contractually with each sub-processor and described further in the Data Processing Addendum.
2. How we notify you of changes
Before we engage a new sub-processor to process customer data or end-user personal information, we will:
- Give customers at least thirty (30) days’ advance notice, by email to the notice address on the customer’s account and by updating this page.
- Allow a customer to object on reasonable data-protection grounds by emailing support@peakifyhub.com within fifteen (15) days of the notice. We will work with the customer in good faith to resolve the objection, which may include not using the new sub-processor for that customer’s data, adding safeguards, or offering an alternative configuration.
- If the objection cannot be resolved, allow the customer to terminate the affected portion of the service without penalty, as its exclusive remedy, with a pro-rata refund of unused prepaid fees attributable to that portion.
Emergency changes. Where a change is required urgently to maintain security, respond to a vendor outage, or comply with a legal requirement, we may engage a sub-processor on shorter notice and will notify affected customers within five (5) business days, explaining the reason. The objection right above still applies from the date of that notice.
3. Questions
Questions about this list, or a request to be notified of changes by email, can be sent to support@peakifyhub.com.