Legal
Subprocessors
Last updated: November 2025
Vault47 uses the third-party service providers ("subprocessors") listed below to operate the Service. Each subprocessor is bound by data-protection commitments consistent with our Privacy Policy and DPA.
Core infrastructure
Used for every Vault47 account.
| Provider | Purpose | Data processed | Region |
|---|---|---|---|
| Cloud database & storage provider | Database, authentication, file storage | Account data, business data you enter, uploaded files | United States |
| Application hosting & CDN provider | Application hosting, content delivery, DDoS protection | IP address, request metadata | Global (US-primary) |
| Transactional email provider | Delivery of account and notification emails | Account data, transactional email content | United States / EU |
AI providers
Powers photo scan, price estimation, chat, and marketing generation. See our Terms for how AI content may be used to train and improve models.
| Provider | Purpose | Data processed | Region |
|---|---|---|---|
| Google Gemini | AI extraction, chat assistant, marketing text generation, image analysis | Prompts, uploaded photos, item descriptions | United States |
| Higgsfield | Marketing image and video generation | Prompts, reference images, brand descriptors | United States |
Messaging & notifications
| Provider | Purpose | Data processed | Region |
|---|---|---|---|
| GatewayAPI | SMS delivery for CRM texting campaigns | Recipient phone numbers, message content | European Union |
| Web Push (VAPID) | Browser & iOS lock-screen push notifications | Push subscription endpoint, notification content | Global (browser vendor) |
Optional integrations
Only used if you explicitly connect the corresponding account inside Vault47.
| Provider | Purpose | Data processed | Region |
|---|---|---|---|
| Google (Gmail) | Only if you connect a Gmail account, read & send messages inside Vault47 | Messages, message metadata, contact info | United States |
| Meta (WhatsApp, Instagram, Messenger) | Only if you connect a Meta business account, read & send messages inside Vault47 | Messages, message metadata, contact info | United States |
| Telegram | Only if you connect a Telegram bot, read & send messages inside Vault47 | Messages, message metadata | Global |
| Shopify | Only if you connect a Shopify store, publish listings and receive order notifications; also processes subscription billing for the Shopify app | Product & listing content, order identifiers and amounts, buyer name and shipping address for invoicing, billing/subscription records | United States / Canada |
Updates to this list
We may add or replace subprocessors as the Service evolves. Material changes will be announced in-app or by email at least 15 days before they take effect, unless a change is required to address an urgent security or legal issue.
Contact
Questions about subprocessors?
Vault47 Tech LLC
23W 47th Street
Manhattan Diamond District, New York, NY