Choicely Subprocessors
Last updated: October 8, 2026
This page lists the third-party subprocessors that Choicely uses to provide the Choicely platform, the Choicely AI app builder (the “AI Builder”), and related services. It is published in accordance with our Data Processing Addendum (DPA) and is incorporated into the DPA by reference.
To receive email notifications when this list changes, subscribe at https://www.choicely.com/subprocessors. We will provide at least 30 days’ prior notice of new or replacement subprocessors, except for emergency engagements as described in the DPA.
Core platform subprocessors
Used for all customers, regardless of whether the AI Builder is enabled.
|
Subprocessor |
Service provided |
Categories of data processed |
Location |
|
Google LLC — Google Cloud Platform |
Cloud infrastructure, hosting, storage, networking |
All categories of Customer Personal Data hosted in the Choicely platform |
EU (default) and/or US, depending on customer region |
|
Stripe, Inc. |
Payment processing for Choicely subscriptions |
Billing contact details, transaction metadata |
EU and US |
|
HubSpot, Inc. |
CRM and sales/support communications |
Account contact details, communications |
EU and US |
|
Mixpanel, Inc. |
Product analytics for the Choicely platform |
Pseudonymized usage events |
US |
|
Bird (MessageBird B.V.) |
Transactional and notification email |
Recipient email address and message content |
EU |
|
Mailjet SAS |
Onboarding, newsletter and marketing email |
Recipient email address and name, message content, delivery and engagement events |
EU |
|
Apple Inc. & Google LLC |
Push-notification gateways (APNs and FCM) for apps built with Choicely |
Push tokens, message payloads |
Global |
AI subprocessors
Used only when a customer uses the Choicely AI Builder or the Website to App Converter. If you use neither, no Customer Personal Data is transmitted to these providers. AI subprocessors do not have access to end user data through applications created with Choicely
|
Subprocessor |
Service provided |
Categories of data processed |
Location |
|
OpenAI, L.L.C. |
Large language model and generative AI inference |
Prompts, context, website content, and AI Output submitted through the AI Builder or the Website to App Converter |
US (with EU residency available for some endpoints) |
|
Anthropic, PBC |
Large language model inference |
Prompts, context, website content, and AI Output submitted through the AI Builder or the Website to App Converter |
US |
|
Google LLC — Vertex AI / Gemini |
Large language model and generative AI inference |
Prompts, context, website content, and AI Output submitted through the AI Builder or the Website to App Converter |
EU and/or US |
|
Fireworks AI, Inc. |
Large language model inference |
Prompts, context, website content, and AI Output submitted through the AI Builder or the Website to App Converter |
US |
|
LangChain, Inc. — LangSmith |
Tracing and evaluation of AI Builder and Website to App Converter generations |
Prompts, context, website content, AI Output and generation metadata from the AI Builder or the Website to App Converter |
US |
How we manage subprocessors
- Due diligence on each subprocessor before onboarding, focused on security, data protection, and reliability.
- Written data-protection terms with every subprocessor, including SCCs and the UK IDTA where required for international transfers.
- A contractual request that AI subprocessors not use customer prompts or outputs to train general-purpose models.
- At least 30 days’ prior notice of intended additions or replacements, with the right to object as described in the DPA.
- An up-to-date list maintained on this page.
Contact
Questions or objections: [email protected]