Everyone who touches your data on our behalf, what they do, and where they do it. Published because "we use industry-leading partners" is not an answer. We give 30 days' notice before adding or replacing any of them, and you can object.
Vendor names to be filled from the signed contracts. The categories, purposes and regions below are fixed by our architecture. Naming a vendor we have not contracted would be exactly the kind of unverifiable claim this page exists to prevent.
| Purpose | Provider | Data | Region |
|---|---|---|---|
| Application hosting & database | To be named | All merchant and conversation data | EU |
| Message delivery (iMessage, SMS, RCS) | To be named | Phone number, message content | EU + carrier networks |
| WhatsApp Business delivery | To be named | Phone number, message content | EU / global |
| AI inference (drafting her replies) | To be named | Conversation context, catalogue snippets | EU where offered |
| Email delivery (fallback + merchant email) | To be named | Email address, message content | EU |
| Payments & invoicing | To be named | Merchant billing details | EU |
| Error monitoring | To be named | Technical logs, no message bodies | EU |
To be told when this list changes, write to legal@trynellie.com and we will add you to the notice list. Commercial terms are in the DPA.