Third parties that process personal data for ReplyTune
Sub-processors
- Effective:
- July 10, 2026
- Last updated:
- July 10, 2026
To provide the Service, Primanza LLC (doing business as ReplyTune) engages the sub-processors listed below. Each is bound by a written contract with data-protection obligations no less protective than those in our Data Processing Agreement, and each processes personal data only to provide services to us.
This page forms Annex III of our Data Processing Agreement. Some listed providers are optional and are engaged only if you enable the corresponding feature (for example, the automation bridge).
01Core Sub-processors
| Sub-processor | Purpose | Data categories | Location |
|---|---|---|---|
| OpenAI, L.L.C. | AI analysis of review sentiment and generation of reply drafts and insight reports (business API; no model training on submitted content) | Review text and brand context | United States |
| Google LLC | Google Business Profile API and OAuth sign-in: reading reviews and locations and publishing replies on your behalf | Reviewer name, photo, review text, ratings, OAuth tokens, sign-in profile | United States / global |
| Stripe, Inc. | Subscription billing, payment processing and fraud prevention | Billing name, email, country, card metadata (no full card numbers held by us), subscription status | United States / global |
| [Hosting / cloud infrastructure provider] | Application hosting, compute, storage and content delivery | All Customer Data at rest and in transit | United States / EEA (region as configured) |
| [Managed database provider] | Hosting of the production PostgreSQL database | All stored Customer Data | [Region] |
| [Transactional email provider] | Delivery of transactional and service emails | Recipient name and email, message content | United States / EEA |
Placeholders in brackets identify infrastructure vendors to be confirmed for your production deployment. They are listed here so the sub-processor inventory is complete; update them with the actual provider name, purpose and region before publishing.
02Optional Sub-processors
The following are engaged only if you choose to enable the relevant integration.
| Sub-processor | Purpose | Data categories | Location |
|---|---|---|---|
| Make (Celonis SE / operated by the Make platform) | Optional automation bridge to publish replies to Google while direct API access is provisioned | Review and reply text, review identifiers | European Union / United States |
| Zapier, Inc. | Optional automation bridge (alternative to Make) | Review and reply text, review identifiers | United States |
03International Transfer Safeguards
Where a sub-processor processes personal data outside the EEA, UK or Switzerland, transfers are protected by appropriate safeguards, principally the European Commission's Standard Contractual Clauses supplemented by the UK International Data Transfer Addendum, and, where available, certification under the EU-U.S. Data Privacy Framework. Details are in our Privacy Policy and Data Processing Agreement.
04Notice of Changes and Objection
We will provide at least 30 days' notice before adding or replacing a sub-processor that processes Customer Personal Data, by updating this page and, where you have subscribed to sub-processor notifications, by email. To subscribe to notifications, or to object to a new sub-processor on reasonable data-protection grounds, contact privacy@primanza.com. Your objection rights and remedies are described in the Data Processing Agreement.