Legal

Subprocessors

The companies that handle data for BotSay, what each one receives, and why. We tell customers at least 30 days before a new one starts.

Last updated 6 November 2026. Privacy

AI engines

They receive the questions you wrote, and nothing about you.

CompanyWhat it receivesWhyWhere
OpenAIQuestion text, marketMeasuring how ChatGPT answersUnited States
AnthropicQuestion text, market. Separately, the stored answer text from every engineMeasuring how Claude answers, and finding brand mentions in every answerUnited States
GoogleQuestion textMeasuring how Gemini answersUnited States
PerplexityQuestion text, marketMeasuring how Perplexity answersUnited States
DataForSEOQuestion text as a search query, with location and languageReading Google's AI search results through licensed search infrastructureEstonia

Everyone else

CompanyWhat it receivesWhyWhere
CaspioAll customer data, and the waiting listThe database holding every BotSay recordUnited States
RailwayData passing through the running application, and stored measurement historyHosting the applicationUnited States (US West)
StripeBilling contact and card details, given by you directly to StripeTaking paymentUnited States
ResendRecipient addresses and message contentSending the weekly email, service email and waiting-list messagesUnited States
CloudflareSite traffic, and bot-check signals from formsHosting www.botsay.ai and preventing abuseGlobal
Google (Analytics, Tag Manager)Site visit data, only after you accept cookiesUnderstanding how people use www.botsay.aiUnited States
HubSpotFor every account's administrators, including those invited by a colleague once they accept: email address, company name, and whether the account is a free month, paid, ended or cancelled. The waiting-list addresses, as beforeOur customer records and our news and offers email. An unsubscribe in HubSpot stops itUnited States

Annex II of our data processing addendum lists the subprocessors that process data on our customers' behalf. This page also lists the site's own providers: analytics (Google), and our waiting list and customer records (HubSpot), which are not processing on a customer's behalf.