Providers we engage and platforms you connect.
Each provider receives only the data the listed service needs, under its own terms and the contractual restrictions that apply to us.
| Provider | Service | Data received | Processing location | Engagement |
|---|---|---|---|---|
| Meta Platforms, Inc. | WhatsApp Cloud API, Messenger, Instagram and Pages Graph API; Facebook Login | Messages, media, comments, posts, insights, access tokens; sign-in name and email | United States and Meta’s global infrastructure | Platform the customer connects |
| Stripe, Inc. | Checkout, customer portal, subscriptions, invoices | Billing name and address, tax number, card details (held by Stripe), payment status | United States and European Union | Engaged by us |
| Resend, Inc. | Sending of system emails (sign-in, invitations, invoices, alerts) and of campaign emails sent from our campaign address | Recipient email address and email content | United States | Engaged by us |
| OpenAI, L.L.C. | AI drafts, AI answers and workflow AI steps when OpenAI is the chosen provider | Message excerpts, knowledge snippets, workflow inputs; requests made with storage disabled | United States | Engaged by us, or by the customer with its own key |
| Anthropic, PBC | AI drafts, AI answers and workflow AI steps when Anthropic is the chosen provider | Message excerpts, knowledge snippets, workflow inputs | United States | Engaged by us, or by the customer with its own key |
| Google LLC | Sign in with Google; Google Sheets API for lookup tables; Google Fonts referenced in emails | Account name and email for sign-in; the rows of sheets the customer connects; font requests from email clients | United States | Engaged by us; sheets connected by the customer |
| DigitalOcean, LLC | Hosting of the marketing website smgateway.com | Website requests (IP address, pages visited) | European Union / United States | Engaged by us |
| Cloudflare, Inc. | Content delivery and privacy-preserving analytics for the marketing website | Website requests and aggregate visit counts | Global network | Engaged by us |
Services your business chooses itself.
These services are not our subprocessors: your business sets them up under its own account and agreement, and decides what to send them.
- Your own email sending account or mail server — Google Workspace, Microsoft 365, Zoho Mail or another SMTP server, your own Resend account or your own SendGrid account — for campaign emails sent from your domain or mailbox.
- Twilio or Unifonic, when you use SMS as a backup for verification codes.
- ClinicGateway, when a clinic connects its appointment system for bookings, reminders and the visits feed.
- Microsoft 365 or Outlook.com, and IMAP/SMTP mail providers, when you connect a mailbox to the email inbox.
- Business systems you connect through Connectors, webhook endpoints you register, and applications you give an API key to; these receive the data you choose to send, including message text for inbound-message webhooks.
Changes to this list.
We update this page before a new provider starts processing customer data and show the effective date at the top. The privacy policy explains the purposes and the retention schedule; the data-security page explains the protections in place.
Privacy and data-deletion contact.
For access, correction, deletion, privacy questions or security reports, use the privacy request email below. You do not need an active account to submit a request.
contact@smgateway.comSee the data-deletion instructions for the information to include.