Subprocessors
Last updated: 4 October 2026
In short
- Four providers help us process the prospects and conversations you keep in Opusend: our AI provider, our work email lookup provider, the network in front of our servers, and our hosting provider.
- Three more help us run the business: website analytics, account emails, and payments.
- Each has one job and a contract that binds it to protect the data. We tell you at least 30 days before we add a new one, and you can object.
This box is a summary. The full list below is what applies.
Subprocessors of your Customer Data
These companies process personal data in the Customer Data you keep in Opusend, on our behalf and under our Data Processing Agreement, of which this list is Annex 3.
| Subprocessor | What it does for us | Personal data it processes | Where | Safeguard for transfers |
|---|---|---|---|---|
| Anthropic, PBC | AI models that write drafts and reply suggestions, summarise companies, score fit and answer questions about your pipeline. May search the web for public information about a company | Prospect and company text, the parts of your profile a message is written from, the conversation a reply answers, the question you ask | United States | Standard Contractual Clauses (Modules 2 and 3), with the UK and Swiss addenda, in Anthropic's data processing terms. Anthropic may not train models on our content |
| Apollo.io | Finds a prospect's work email address, only when you press "Find emails" | The prospect's first and last name, employer, company domain and LinkedIn profile URL; it returns a work email address, job title and company. Never a personal email address or a phone number | United States | EU-U.S. Data Privacy Framework (with the UK extension and the Swiss-U.S. framework) and Standard Contractual Clauses |
| Cloudflare, Inc. | The network in front of our website and app: delivery, protection from attacks and bots, traffic measurement without cookies | IP address, browser details and the requests passing through it, including your data in transit to our servers | Global network; company in the United States | EU-U.S. Data Privacy Framework and Standard Contractual Clauses, in Cloudflare's data processing addendum |
| Hostinger International Ltd | Runs the server and the database that hold the Opusend service and its data | All the data in the service | United States (Boston, Massachusetts); company in Cyprus | Standard Contractual Clauses (Modules 2 and 3), with the UK Addendum, in Hostinger's data processing addendum |
Other providers that process personal data for Opusend
These companies process personal data that Opusend controls, about our customers, their users and the visitors to our website. They are described in our Privacy Policy.
| Provider | What it does for us | Personal data it processes | Where | Safeguard for transfers |
|---|---|---|---|---|
| Google Analytics (Google Ireland Limited and Google LLC) | Measures visits to www.opusend.com, with your consent. It never runs in the app | IP address, browser and device details, pages visited, and the Google Analytics cookie identifiers once you accept | United States and Google's global network | EU-U.S. Data Privacy Framework and Standard Contractual Clauses |
| Emailit (FunFirst s.r.o.) | Delivers account emails: address confirmations, password resets, sign-in notices | Your email address and the content of that email | Czech Republic (European Union) | None needed: data stays in the EU |
| Lemon Squeezy (Link, LLC, formerly Lemon Squeezy LLC) | Merchant of record: sells our plans, takes payment, charges tax, issues invoices. It handles payment details as an independent controller | Your email address, your Opusend account and workspace ids, and the payment details you give it at checkout | United States | Standard Contractual Clauses |
Services you connect yourself
Some services see your data because you use them with Opusend, under your own agreement with them. They are not our subprocessors: Google, when you sign in with Google or connect Gmail; LinkedIn, where the actions you take or schedule happen in your own account; the mail provider of a mailbox you add with its password; and DuckDuckGo, whose icon service your browser asks for a company's logo in the dashboard, sending it the company's website domain and your IP address.
Changes to this list
We give at least 30 days' notice before a new subprocessor processes your Customer Data, by email to your workspace owner and on this page, and you can object as our Data Processing Agreement explains. Questions: [email protected].