Third parties that process personal data for ReplyTune
Sub-processors
- Effective:
- July 10, 2026
- Last updated:
- August 5, 2026
To provide the Service, Primanza LLC (doing business as ReplyTune) engages the sub-processors listed below. Each is bound by a written contract with data-protection obligations no less protective than those in our Data Processing Agreement, and each processes personal data only to provide services to us.
This page forms Annex III of our Data Processing Agreement. Some listed providers are optional and are engaged only if you enable the corresponding feature (for example, the automation bridge).
01Core Sub-processors
| Sub-processor | Purpose | Data categories | Location |
|---|---|---|---|
| OpenAI, L.L.C. | AI analysis of review sentiment and generation of reply drafts and insight reports (business API; no model training on submitted content) | Review text and brand context | United States |
| Google LLC | Google Business Profile API and OAuth sign-in: reading reviews and locations and publishing replies on your behalf | Reviewer name, photo, review text, ratings, OAuth tokens, sign-in profile | United States / global |
| Stripe, Inc. | Subscription billing, payment processing and fraud prevention | Billing name, email, country, card metadata (no full card numbers held by us), subscription status | United States / global |
| Vercel | Application hosting, serverless compute, content delivery and scheduled jobs | All Customer Data in transit, and application logs | United States / EEA (region as configured) |
| Supabase | Hosting of the production PostgreSQL database | All stored Customer Data | United States / EEA (project region as configured) |
| Resend | Delivery of transactional and service emails (account verification, password reset, notifications) | Recipient name and email, message content | United States / EEA |
02Optional Sub-processors
The following are engaged only if you choose to enable the relevant integration.
| Sub-processor | Purpose | Data categories | Location |
|---|---|---|---|
| Make (Celonis SE / operated by the Make platform) | Optional automation bridge to publish replies to Google while direct API access is provisioned | Review and reply text, review identifiers | European Union / United States |
| Zapier, Inc. | Optional automation bridge (alternative to Make) | Review and reply text, review identifiers | United States |
03International Transfer Safeguards
Where a sub-processor processes personal data outside the EEA, UK or Switzerland, transfers are protected by appropriate safeguards, principally the European Commission's Standard Contractual Clauses supplemented by the UK International Data Transfer Addendum, and, where available, certification under the EU-U.S. Data Privacy Framework. Details are in our Privacy Policy and Data Processing Agreement.
04Notice of Changes and Objection
We will provide at least 30 days' notice before adding or replacing a sub-processor that processes Customer Personal Data, by updating this page and, where you have subscribed to sub-processor notifications, by email. To subscribe to notifications, or to object to a new sub-processor on reasonable data-protection grounds, contact replytunesecurity@primanzahq.com. Your objection rights and remedies are described in the Data Processing Agreement.