This page lists the third parties (“sub-processors”) that Where Beagles Dare Ltd engages to process personal data in the course of providing Vidual Inbox. Each sub-processor is bound by data-protection obligations equivalent to those in our Data Processing Agreement.
We give at least 30 days’ notice of any intended addition or replacement of a sub-processor. To be notified of updates, email hello@vidualapp.com.
Current sub-processors
| Sub-processor | Purpose | Location | Transfer safeguard |
|---|
| Railway | Application hosting & database infrastructure | USA / EU | SCCs / UK IDTA |
| Backblaze B2 | Encrypted file storage | USA | SCCs / UK IDTA |
| Cloudflare | CDN, content delivery & signup bot protection (Turnstile) | Global | SCCs / UK IDTA |
| Resend | Transactional email delivery | USA | SCCs / UK IDTA |
| Stripe | Payment processing | USA / global | UK IDTA / EU–US DPF (UK extension); PCI-DSS |
| Anthropic (Claude) | AI features (summaries, insights) | USA | SCCs / UK IDTA; zero-retention API; not used to train models |
| Google (Gmail API) | Sending replies via the customer’s connected Gmail (send-only scope) | USA | SCCs / DPF; Google API Limited Use |
| Meta Platforms Ireland Ltd | Instagram Direct Message delivery | EU (Ireland) | UK/EU; intra-group transfers per Meta terms |
| Shopify | Order & customer context (only if connected) | Canada / USA | Adequacy (Canada) / SCCs |
| Klaviyo | Subscriber data (only if connected) | USA | SCCs / DPF |
| Mailchimp (Intuit) | Subscriber data (only if connected) | USA | SCCs / DPF |
| Apple (APNs) / Web Push | Push notifications | USA | SCCs |
Integrations marked “only if connected” are engaged solely where the customer chooses to connect the relevant account. International transfers are governed by the safeguard shown for each sub-processor, as described in section 7 of our Data Processing Agreement.