Who processes data for us.
These companies process personal data so Adverizeo can run, each for the job shown next to it.
Last updated
Every company, and what it receives.
| Company | What it does | Data | Location | Transfer safeguard |
|---|---|---|---|---|
| RailwayRailway Corporation | Hosts the app, database and background jobs | All account data and everything you create in Adverizeo | Netherlands (EU) | Stored in the EU. US company: EU-US Data Privacy Framework and SCCs |
| Amazon Web ServicesAmazon Web Services, Inc. | Stores files you upload and files we generate (S3) | Uploaded product photos, documents and ad reports, and generated images | Frankfurt, Germany (EU) | Stored in the EU. US company: EU-US Data Privacy Framework and SCCs |
| OpenAI | Writes copy and creates or edits images | Briefs, brand details, uploaded photos and documents, and client report data sent with a request, which can include personal data | United States | SCCs in its DPA |
| Anthropic | Writes copy and reviews ads for compliance | Briefs, brand details, draft ads and client report data sent with a request, which can include personal data | United States (requests may run in other regions) | SCCs in its DPA |
| StripeStripe, LLC | Takes payments and manages subscriptions | Name, email, billing address, card details (entered with Stripe, never stored by us) | United States | EU-US Data Privacy Framework and SCCs |
| ResendPlus Five Five, Inc. | Sends account emails, optional update emails and the newsletter | Email address, name, email content and delivery logs | United States | SCCs in its DPA |
| Cloudflare TurnstileCloudflare, Inc. | Checks for bots on sign-in, sign-up, password reset and our public forms | IP address, browser and connection details | Cloudflare’s global network (US company) | SCCs in its DPA |
| Google Analytics 4Google LLC | Measures how the public website is used | Pages viewed, device and approximate location (only after consent for visitors on a European time zone) | Google data centers worldwide (US company) | EU-US Data Privacy Framework and SCCs |
| Namecheap Private EmailNamecheap, Inc. | Hosts our support and contact mailboxes | Messages you send us, including through the contact form, and our replies | United States | SCCs in its DPA |
| FirecrawlSideGuide Technologies, Inc. | Reads a website you enter, for Instant Ads and “fill from website” in My Brand | The address of the public web page and the page text it sends back | United States | Only the public page address is sent, no account data |
Notice first, and a right to object.
- 1
We post a new or replacement subprocessor on this page 30 days before it starts processing your data.
- 2
If you object, tell us through the contact form within those 30 days and we’ll work through your concern.
- 3
If we can’t resolve it, you can stop using Adverizeo and export your data first.
Change log
- October 17, 2026
Listed Firecrawl, which reads a website you enter for Instant Ads and My Brand.
- October 2, 2026
Listed Namecheap Private Email, which hosts our support mailboxes and this page had left out.
- October 1, 2026
Listed Cloudflare Turnstile and Google Analytics 4, which this page had left out. Corrected Stripe and AWS locations.
- September 5, 2026
Resend replaced Mailgun for email.
Concern about a subprocessor?
Whether it’s about a company on this list or a change we’ve announced, we’ll look into it.