We will post changes here and email account holders at least 14 days before a new sub-processor handles customer data. If you object on reasonable data-protection grounds and we cannot resolve it, you may cancel and receive a pro-rata refund of prepaid fees.
| Provider | Purpose | Location |
|---|---|---|
| Paddle.com Market Ltd | Independent controller: merchant-of-record checkout, billing, tax, fraud prevention and refunds | United Kingdom, United States |
| MongoDB Atlas (MongoDB, Inc.) | Application database | United States (Oregon) |
| DigitalOcean, LLC | Application hosting | India (Bangalore) |
| Google LLC | Sign-in; Search Console and Analytics data you connect; public Places API listing data; Google Analytics on the marketing site | United States and Google's global regions |
| Microsoft Corporation | Bing Webmaster Tools data you connect | United States and Microsoft's global regions |
| OpenRouter, Inc. and the model providers it routes to | Managed AI: drafts, summaries and checks when you do not bring your own key | United States and the provider's regions |
| Bright Data Ltd | Reading answer engines and search results for AI visibility and rank checks | Israel, United States and its network regions |
| Resend, Inc. | Transactional email and report delivery | United States |
| Twilio Inc. | Report delivery by WhatsApp | United States |
If you bring your own LLM API key, requests are sent from RankZap to your selected provider under its terms. This includes OpenRouter if you select it.