Legal
Subprocessors
Version 1.0 · Effective 5 October 2026 · Last updated 5 October 2026
These third parties process personal data on behalf of Blizo. The list applies to our Data Processing Addendum and our Privacy Policy. We announce new or replaced subprocessors here and notify workspace owners at least 30 days before the change.
Getreach (app.getreach.com) is not a third party: it is operated by Getreach Limited, the company that operates Blizo. AI models from Anthropic, xAI, Perplexity, OpenAI and Google are reached through OpenRouter. Questions: support@blizo.com.
Hosting, database and infrastructure
| Provider | Purpose | Personal data | Location | Transfer safeguard |
|---|---|---|---|---|
| Vercel Vercel Inc. | Application hosting, content delivery, serverless functions (Frankfurt region) and bot protection (Vercel BotID) on sign-up and sign-in | All data processed by the application, IP address, request metadata, browser signals for bot detection | EU (Frankfurt) for functions; global edge network; USA | Data Privacy Framework and/or Standard Contractual Clauses (incl. UK Addendum) |
| Supabase Supabase, Inc. | Managed PostgreSQL database and file storage | Account, workspace, billing references, project data, prompts, AI answers, crawled content, logs | EU (Frankfurt, AWS eu-central-1) | EU Standard Contractual Clauses and UK Addendum |
| Trigger.dev Trigger.dev | Background job execution (measurements, reports, emails, billing reconciliation) | Job payloads containing workspace identifiers, prompts, domains and, for email jobs, recipient addresses | Provider-managed cloud (see provider DPA) | EU Standard Contractual Clauses and UK Addendum |
| Cloudflare Cloudflare, Inc. | Authoritative DNS for blizo.com (no application traffic is proxied) | DNS query metadata (resolver IP address, queried hostname) | Global network; USA | Data Privacy Framework and/or Standard Contractual Clauses (incl. UK Addendum) |
Payments and billing
| Provider | Purpose | Personal data | Location | Transfer safeguard |
|---|---|---|---|---|
| Stripe Stripe Payments Europe, Limited (Ireland) and Stripe, Inc. | Checkout, subscription billing, invoices, tax calculation, customer portal and payment fraud prevention | Name, email, company name, billing address, tax ID, payment method, transaction history | EU (Ireland); USA | Data Privacy Framework and/or Standard Contractual Clauses (incl. UK Addendum) |
Email delivery
| Provider | Purpose | Personal data | Location | Transfer safeguard |
|---|---|---|---|---|
| Resend Plus Five Five, Inc. (Resend) | Transactional and service email delivery (verification, password reset, trial and billing notices, reports); delivered through Amazon SES in eu-west-1 (Ireland) | Recipient name and email address, email content, delivery and bounce events | EU (Ireland) for sending; USA for account administration | Data Privacy Framework and/or Standard Contractual Clauses (incl. UK Addendum) |
Product analytics (only with consent)
| Provider | Purpose | Personal data | Location | Transfer safeguard |
|---|---|---|---|---|
| PostHog PostHog, Inc. | Product analytics, page views, interaction events and masked session recordings, only after you accept analytics cookies (only with your consent) | Pseudonymous device identifier, pages visited, clicks, browser and device data, coarse location, masked session recordings | EU (Frankfurt, PostHog EU Cloud) | EU Standard Contractual Clauses and UK Addendum |
AI platforms and model access
| Provider | Purpose | Personal data | Location | Transfer safeguard |
|---|---|---|---|---|
| OpenRouter OpenRouter, Inc. | Model gateway for AI answers (Claude, Grok, Perplexity) and for onboarding research (brand, competitor and prompt suggestions) | Prompts, brand, competitor and market names, domains; no account or contact data | USA | EU Standard Contractual Clauses and UK Addendum |
| Anthropic Anthropic, PBC via OpenRouter | Claude answers and onboarding research models | Prompts, brand, competitor and market names, domains; no account or contact data | USA | Data Privacy Framework and/or Standard Contractual Clauses (incl. UK Addendum) |
| xAI X.AI LLC via OpenRouter | Grok answers | Prompts, brand, competitor and market names, domains; no account or contact data | USA | EU Standard Contractual Clauses and UK Addendum |
| Perplexity Perplexity AI, Inc. via OpenRouter | Perplexity (Sonar) answers | Prompts, brand, competitor and market names, domains; no account or contact data | USA | EU Standard Contractual Clauses and UK Addendum |
| OpenAI OpenAI, L.L.C. via OpenRouter | Onboarding research models | Prompts, brand, competitor and market names, domains; no account or contact data | USA | Data Privacy Framework and/or Standard Contractual Clauses (incl. UK Addendum) |
| Google Google LLC via OpenRouter | Gemini models for onboarding research | Prompts, brand, competitor and market names, domains; no account or contact data | USA | Data Privacy Framework and/or Standard Contractual Clauses (incl. UK Addendum) |
Search, SEO and website data
| Provider | Purpose | Personal data | Location | Transfer safeguard |
|---|---|---|---|---|
| DataForSEO DataForSEO | Search results, Google AI Overviews and AI Mode, ChatGPT and Gemini answer collection, keyword and market data | Prompts, keywords, brand and competitor names, domains, market and language | Outside the EU/EEA (see provider DPA) | EU Standard Contractual Clauses and UK Addendum |
| Ahrefs Ahrefs Pte. Ltd. | Competitor discovery and organic keyword data for your domain | Domains and competitor domains | Singapore | EU Standard Contractual Clauses and UK Addendum |
| Serper Serper | Search result lookups during onboarding research | Search queries containing brand, competitor or domain names | Outside the EU/EEA (see provider terms) | EU Standard Contractual Clauses and UK Addendum |
| SerpApi SerpApi, LLC | Fallback search result lookups during onboarding research | Search queries containing brand, competitor or domain names | USA | EU Standard Contractual Clauses and UK Addendum |
| Brave Search API Brave Software, Inc. | Fallback web search during onboarding research | Search queries containing brand, competitor or domain names | USA | EU Standard Contractual Clauses and UK Addendum |
| Jina AI Jina AI | Reading public web pages (Jina Reader) and fallback web search | Public URLs of your and your competitors' websites, search queries | EU (Germany) and/or USA (see provider terms) | EU Standard Contractual Clauses and UK Addendum |