Last Updated: 21st September 2026
SalesBlink is operated by FUTUREBLINK Inc. To provide our services we engage third-party companies, known as sub-processors, which may process personal data on our behalf. This page lists them, what each is used for, and what personal data each one handles.
This page forms part of our Data Processing Agreement and should be read together with our Privacy Policy.
We give customers at least 30 days' notice before adding a new sub-processor or replacing an existing one. Notice is given by email to account owners and recorded in the changelog at the foot of this page. Customers may object on reasonable data protection grounds within 15 days, as set out in our Data Processing Agreement.
| Sub-processor | Purpose | Personal data processed | Processing location |
|---|---|---|---|
| Amazon Web Services | Cloud infrastructure, object storage, transactional email delivery, and compute | Email content and attachments, uploaded files, recipient email addresses, account data | United States, European Economic Area |
| DigitalOcean | Cloud infrastructure and hosting | All categories of platform data resident on hosted workloads | United States, European Economic Area |
| OVHcloud | Cloud infrastructure and hosting | All categories of platform data resident on hosted workloads | European Economic Area |
| Google Cloud Platform | Serverless functions and messaging infrastructure | Mailbox change notifications, message and account identifiers | United States, European Economic Area |
| Cloudflare | DNS management for customer custom tracking domains | Customer domain names and DNS records | Global edge network |
| MongoDB Atlas | Primary application database | Account and user records, prospect and contact records, campaign data, email content, engagement events | United States, European Economic Area |
| Sub-processor | Purpose | Personal data processed | Processing location |
|---|---|---|---|
| Amazon SES | Transactional email delivery for account, notification, and system email | Recipient email addresses, message content, delivery and bounce events | United States, European Economic Area |
| Google (Gmail API / Workspace) | Sending and receiving mail from customer-connected Google mailboxes | Message content, headers, attachments, and thread metadata within the scope of the authorisation granted | Global |
| Microsoft (Graph API / Outlook) | Sending and receiving mail from customer-connected Microsoft mailboxes | Message content, headers, attachments, and thread metadata within the scope of the authorisation granted | Global |
| Google Workspace and Microsoft 365 | Provisioning and hosting of managed sending domains and mailboxes for done-for-you customers | Organisation details, provisioned mailbox addresses, and mail sent from or received by those mailboxes | Global |
| Mail servers you configure | Sending and receiving mail via SMTP and IMAP servers you supply | Message content and mailbox credentials, transmitted to the server you nominate | Determined by you |
| Brevo | Marketing contact list management | Name, email address, signup source, list membership | European Economic Area |
| EmailOctopus | Marketing list management | Name, email address, signup source | United States, European Economic Area |
The providers below process prompt content when you use AI-assisted features. They are contractually prohibited from using that content to train or improve their models. Where you select a model other than our default, or supply your own API key, different terms apply — see section 10 of our Data Processing Agreement.
| Sub-processor | Purpose | Personal data processed | Processing location |
|---|---|---|---|
| OpenAI | AI-assisted email copy and subject line generation | Prompt content supplied by the customer, which may include contact and company details | United States |
| OpenRouter | Model routing for AI generation and assistant features | Prompt content supplied by the customer | United States |
| Sub-processor | Purpose | Personal data processed | Processing location |
|---|---|---|---|
| Stripe | Subscription billing and payment processing | Name, billing email and address, subscription and invoice records. Card details are handled by Stripe directly. | United States, European Economic Area |
| Partnero | Affiliate and referral programme tracking | Referral identifiers, signup and conversion events, email address | European Economic Area |
| Frill | Feature request board and product roadmap | Feedback content you submit, display name, email address | European Economic Area |
| Crisp | Live chat, support inbox, and knowledge base | Name, email address, plan attributes, conversation transcripts and attachments | European Economic Area |
| Sub-processor | Purpose | Personal data processed | Processing location |
|---|---|---|---|
| Sentry | Error tracking and performance monitoring | Stack traces, request metadata, user and account identifiers, IP address | United States |
| PostHog | Product analytics and event tracking | User and account identifiers, email address, feature usage events, device and IP metadata | United States, European Economic Area |
| Google Analytics and Google Tag Manager | Website and application analytics, and tag management | Page views, referrer, device and browser metadata, IP address, cookie identifiers | Global |
| Google Ads | Conversion tracking and advertising retargeting | Page views, conversion events, IP address, advertising identifiers | Global |
| Meta (Facebook) Pixel | Conversion tracking and advertising retargeting | Page views, conversion events, IP address, advertising identifiers | Global |
| Microsoft Clarity | Session recording and heatmaps | Interaction events, page content as rendered, device metadata, IP address | United States |
| Apollo.io | Website visitor identification on our marketing site | IP address, page views, inferred company attribution | United States |
| Sub-processor | Purpose | Personal data processed | Processing location |
|---|---|---|---|
| Google Firebase Cloud Messaging | Web push notification delivery | Device push tokens, notification content | Global |
| Slack | Delivery of notifications to customer-connected Slack workspaces | Notification content, workspace and channel identifiers | United States |
| Logo.dev | Company logo lookup in lead and inbox views | Company domain names | United States |
| Gravatar | Contact avatar lookup | Hashed email addresses | United States |
| ipapi.co | IP geolocation and timezone detection | Visitor IP address | European Economic Area |
| Google reCAPTCHA | Bot and abuse prevention on signup and password reset | IP address, browser interaction signals, cookie identifiers | Global |
| Cal.com | Meeting scheduling embed | Name, email address, meeting time and notes | European Economic Area |
| DNS blocklist (DNSBL) operators | Sending domain and IP reputation checks for deliverability | Sending domain names and IP addresses. No personal data is submitted. | Global |
| WHOIS and RDAP registries, and certificate transparency logs | Domain registration and age lookups for deliverability scoring | Domain names only. No personal data is submitted. | Global |
| Google Fonts | Web font delivery | IP address and user agent | Global |
| Atlassian (Bitbucket) | Source code hosting and deployment pipeline | Source code and build artefacts. No production customer data by design. | United States, European Economic Area |
The services below receive data only where you explicitly connect them to your account. Because you initiate and control these transfers, they are not our sub-processors, and your own agreement with the provider governs what happens to the data. We list them here for transparency.
| Sub-processor | Purpose | Personal data processed | Processing location |
|---|---|---|---|
| HubSpot | CRM contact and activity synchronisation | Contact records, engagement events, campaign membership | United States, European Economic Area |
| Pipedrive | CRM contact and activity synchronisation | Contact records, deal and activity data, engagement events | European Economic Area |
| Zoho CRM | CRM contact and activity synchronisation | Contact records, engagement events | Global |
| Zapier and n8n | Workflow automation | Whatever data the customer configures the workflow to transfer | Global |
| OpenAI (ChatGPT) and Anthropic (Claude) | AI clients connecting through the Model Context Protocol | Account data reachable through the tool surface, scoped by the authorisation the customer approves | United States |
| Google, Microsoft, LinkedIn, Facebook, X | Social sign-in and account linking | Name, email address, profile identifier and image | Global |
If you have any questions about our sub-processors, or would like to know the processing region for a specific provider, contact our data protection contact at dpo@salesblink.io or write to us.