EN
Try for free

Legal

Subprocessors

These are the companies that help us deliver Blixtflow and that may process personal data on our customers’ behalf. The list is Annex 3 to our data processing agreement.

  • Effective from
  • Version1.1
  • 4min read

In short

  • Agreements with all

    Every subprocessor is bound by an agreement under Article 28 GDPR.

  • 30 days’ notice

    You are told at least 30 days before a new subprocessor starts being used.

The summary makes the document easier to read – the full text below is what applies.

1Current subprocessors#

SubprocessorServicePersonal dataLocationSafeguard
Hosting provider within the EUServers, database and backups for BlixtflowAll customer dataEUWithin the EU – no transfer
OpenAI (ChatGPT, via API)AI features: replies, summaries, transcription, chatbotText and audio sent for AI processing (identity numbers, cards and IBANs are masked)USAStandard contractual clauses (SCC)
ElevenLabsThe AI receptionist's voice (speech)Text read aloud in the callUSAStandard contractual clauses (SCC)
TelnyxTelephony for the AI receptionist: calls and recordingPhone numbers, call audioUSAStandard contractual clauses (SCC)
Twilio (Twilio Ireland Ltd and Twilio Inc.)SMS and WhatsAppPhone numbers, messagesEU and USAEU–US Data Privacy Framework, standard contractual clauses
Mailgun Technologies, Inc. (Sinch)Sending and receiving emailEmail addresses, email content and attachmentsUSAEUEU–US Data Privacy Framework, standard contractual clauses
650 Industries, Inc. (Expo)Delivery of push notifications to the mobile appPush token, notification title and textUSAStandard contractual clauses
Apple Inc. (Apple Push Notification service)Delivery of notifications to iPhonePush token, notification contentUSAEU–US Data Privacy Framework
Google LLC (Firebase Cloud Messaging)Delivery of notifications to AndroidPush token, notification contentUSAEU–US Data Privacy Framework
Stripe Payments Europe LtdPayment of subscriptions and invoicesThe company's billing details and contact person (card details are handled only by Stripe)IrelandUSAEU–US Data Privacy Framework, standard contractual clauses
Cloudflare, Inc. (Turnstile)Bot protection on sign-in, sign-up and formsIP address and technical browser data during the checkEUUSAEU–US Data Privacy Framework, standard contractual clauses

2Services the customer connects#

When a customer connects its own service – such as Google (Gmail, Google Calendar), Microsoft (Outlook), Meta (Facebook, Instagram, WhatsApp), Fortnox, its own mail server or an online store such as WooCommerce – data is exchanged between Blixtflow and that service on the customer’s behalf. The provider of such a service is not our subprocessor but has its own agreement with the customer, and its terms and privacy policies apply.

3Changes and notifications#

We notify customers at least 30 days before a new subprocessor is engaged or an existing one is replaced, by email to the account owner and in Blixtflow. The customer can object as set out in the DPA.

Send questions about subprocessors to hello@blixtflow.com.

Questions about this document?

Get in touch and we will answer – in English or Swedish.

hello@blixtflow.com
Company
Blixtgo Agency AB
Company registration number
559069-9038
Address
Drottninggatan 6A, 212 11 Malmö, Sweden

Back to top