Subprocessors
Last updated · June 19, 2026
The third-party providers that process data to deliver Kleos, and what they receive.
How we use subprocessors
To deliver Kleos we rely on a small set of trusted third-party providers ("subprocessors") that process data on our behalf. We require appropriate data-protection terms with each, and where personal data leaves the EU/EEA we rely on Standard Contractual Clauses or another valid transfer mechanism.
This list is maintained and may change as we add or remove providers; material changes are reflected here.
Current subprocessors
| Provider | Purpose | Data processed | Region |
|---|---|---|---|
| Stripe | Payments & billing | Billing contact, card metadata (brand/last-4), subscription ids | US / global |
| Resend | Transactional & broadcast email | Recipient email, message content | US |
| Twilio | SMS alerts | Phone number, message content | US / global |
| Shopify | Commerce, orders & attribution | Orders, products, discount codes, store data | Per merchant |
| Meta / Instagram | Creator metrics & mention tracking | Public profile data, post & mention metrics | US / global |
| TikTok, YouTube (Google), Pinterest, X | Creator metrics & content matching | Public profile data, post/video metrics | US / global |
| Apify | Creator profile enrichment & contact discovery | Public creator handles, profiles, public contact details | EU / US |
| Anthropic, OpenAI, DeepSeek | AI features (cascade) | Prompt text + workspace context (not retained for training) | US / per provider |
| Google (GSC, GA4) | Marketing-site search & traffic analytics | Aggregated/anonymized site analytics | US / global |
| Error & ops tooling (GlitchTip/Sentry) | Error tracking & reliability | Error logs, request metadata | EU / self-hosted |
| Cloud hosting & storage | Application hosting, database, file storage | All service data at rest/in transit | EU / US |
| Klaviyo, HubSpot | Optional CRM imports (brand-initiated) | Contacts the brand chooses to import | US |
| Meta / TikTok / Google | Advertising & conversion measurement (consent-gated; independent controllers) | SHA-256-hashed email, IP address, browser user-agent | US / global |
Notifications & objections
Customers on a Data Processing Addendum can request advance notice of new subprocessors. If you have questions or wish to object to a subprocessor, contact us through the link below.
Kleos is a product of Arthea LLC. Questions about this document? Contact us.