Effective date:
Main providers that may process data in connection with Hey Beaver.
Scope
This list identifies the main providers that may process data in connection with the Service. Processing location may depend on service configuration, data type, account settings, and the provider current subprocessor list.
Main subprocessors
| Provider | Purpose | Location / transfers | Notes |
|---|---|---|---|
| Stripe Payments Europe, Limited / Stripe, Inc. | payments, billing, payment handling, payment fraud prevention | EEA / Ireland and global transfers, including the United States and other jurisdictions | Stripe may act as processor and as independent controller depending on processing purpose. |
| Cloudflare, Inc. | hosting, DNS, CDN, security, routing, caching, and abuse protection | Cloudflare global edge network; metadata mainly in the United States and Europe | For storage or data-localisation features, account and product configuration should be confirmed. |
| OpenAI, L.L.C. | AI/LLM processing, content generation, prompt and response processing | United States or Europe depending on configuration | Confirm data residency, Zero Data Retention, or modified abuse monitoring for the API account. |
| Cloudflare, Inc. | email routing, mail protection, and technical communication infrastructure | Cloudflare global infrastructure; metadata and logs may be processed in the United States and Europe | Applies to the technical email layer, not outbound campaigns handled by Instantly. |
| Instantly.ai / Foo Monk LLC | outbound outreach, campaign automation, prospect data, and email activity | United States and subprocessors listed by Instantly; possible transfers outside the EEA | Marketing and prospecting data requires a separate legal basis and electronic-communications review. |
| Cloudflare, Inc. | analytics, operational telemetry, technical and security logs | Cloudflare global infrastructure; scope depends on enabled products and cookie/analytics settings | Analytics and marketing cookies may require user consent. |
Changes
Changes to the Subprocessor List will be published in the Service or communicated to customers in the manner described in the Terms. For providers outside the EEA, we apply appropriate transfer mechanisms where required by data-protection law.