Ce document est disponible en anglais et en hébreu. Le texte anglais ci-dessous est la version qui fait foi.
Subprocessors
Updated:
These are the third-party providers that may process personal data when we provide Shager. They are bound by written agreements that protect the data at least as well as our Data Processing Addendum.
Current subprocessors
| Provider | What it does | Data involved | Location |
|---|---|---|---|
| Hetzner Online GmbH | Server hosting, storage and backups | All service data, stored on our servers | Germany (company); servers in Helsinki, Finland (EU) |
| Resend, Inc. | Email delivery: sign-in and verification links, approval requests, notifications | Recipient email address, the email's content, and delivery status | United States |
| Google LLC (Google Workspace) | Our support inbox (the contact email address) and the copy of each contact form message | Messages you send us, your name and your email address | United States and other countries where Google operates |
| Anthropic PBC | AI writing assistant | Only text a user chooses to send to the assistant | United States |
| Internet Security Research Group (Let's Encrypt) | TLS certificates for encrypted connections | No personal data, only our domain names | United States |
| GoDaddy | DNS for our domain | No personal data, only DNS records | United States |
Planned
| Provider | What it will do | Status |
|---|---|---|
| SMS / WhatsApp messaging provider | Sending approval links by SMS or WhatsApp, if the agency chooses to | Not in use yet. It will be listed here before we start using it. |
| Payment provider | Taking payments for paid plans | Not in use yet. Shager does not take payments today. It will be listed here before paid plans start. |
Not a subprocessor: the country database
To show the website in your language, we look up your country in a copy of the DB-IP country database that runs on our own servers. No data is sent to DB-IP.
Not subprocessors: the social networks
Meta Platforms (Facebook, Instagram), Google (YouTube), X Corp. (X), LinkedIn Corporation, a Microsoft company (LinkedIn), and TikTok receive the content you choose to publish, sent to the accounts you choose. They are destinations picked by you, not providers working for us, and their own terms and privacy policies apply.
Changes
We will update this page and notify customers who have accepted the DPA at least 30 days before a new subprocessor starts processing personal data. If you have a reasonable data protection objection, write to hello@shager.ai within that period. The process is described in the DPA.
Self-hosted installations are run by the customer, who chooses its own providers. This list does not apply to them.