Sub-Processors
Last updated: 24 August 2026
www.botvee.ai/subprocessors
Botvee uses the third-party sub-processors below to deliver the Service. All sub-processors that process personal data are engaged under contracts requiring appropriate technical and organisational measures and, where applicable, appropriate international-transfer safeguards.
"Core" providers are always used. Providers marked "enabled features only" are used only where the customer (or Botvee) enables the corresponding channel or integration — if you do not use that feature, that provider does not process your data.
Registered customers receive at least 14 days' prior notice before a new sub-processor is added or a material change is made, and may object on reasonable data-protection grounds (see DPA).
Core Platform Sub-Processors (Always in Use)
| Provider | Purpose | Data Processed | Region / HQ |
|---|---|---|---|
| OpenAI, LLC | AI response generation | Chat prompts and interaction content sent via API | USA |
| Supabase, Inc. | Primary application database, vector database for the agent's knowledge base (document embeddings), and file storage | Account data, agent configuration, conversation, lead, order, and related data; embedded/processed content from your uploaded documents; uploaded files | USA / EU (region options) |
| Microsoft Corporation (Azure) | Backend application hosting | Technical logs, IP address, request metadata | Microsoft Azure region(s) |
| Vercel, Inc. | Frontend application hosting, global CDN/edge | Technical logs, IP address, request metadata | Global (edge) |
| Stripe, Inc. | Payments, billing, tax calculation | Billing name, email, transaction/invoice data (no full card data held by Botvee) | USA / EU |
| Google LLC / Google Ireland Ltd | Sign in with Google (account authentication) | Name, email address, and Google account identifier of the person signing in | USA / EU |
| Resend (and SMTP email delivery) | Transactional and notification emails (verification, billing, notifications) | Email address, name, message content | USA / provider region |
| Redis (managed cache/queue provider) | Caching and background job processing | Transient session and job data | Provider region |
Website crawling is deliberately absent from this list: when Botvee builds an agent's knowledge base from the pages you point it at, that crawling runs on Botvee's own infrastructure and the page content is not handed to a third-party crawling service. The specific email-delivery, cache, storage, and vector-database providers may be updated from time to time; the current providers are reflected in this list.
Channel & Integration Sub-Processors (Enabled Features Only)
Used only where the customer connects or enables the relevant channel or integration. Some channels and integrations are rolled out progressively (for example, certain messaging and e-commerce integrations may be in development at any given time); a listed provider processes personal data only where the corresponding feature is available on your plan and enabled by you.
| Provider | Purpose | Data Processed | Region / HQ |
|---|---|---|---|
| Meta Platforms Ireland Ltd (WhatsApp Business API, Instagram, Messenger) | Messaging channels | End-User phone numbers / platform IDs and message content | EU / USA |
| Telegram FZ-LLC | Telegram messaging channel | End-User Telegram IDs and message content | International |
| Google LLC / Google Ireland Ltd | Google Calendar/Sheets/Drive and, where used, Gmail | Booking/attendee details, exported lead/booking data, email content | USA / EU |
| Shopify Inc. | Shopify store integration and, where you install from the Shopify App Store, subscription billing | Store, product, and order data; customer order details; subscription charge and invoice data | Canada / USA |
| Automattic / WordPress (self-hosted plugin) | WordPress site integration | Widget and site-content data | Customer-hosted |
| Customer-configured webhooks / endpoints | Deliver data to endpoints you choose | Data you configure to send | Determined by you |
Delivery / Courier Tracking (Not Yet Live)
Courier tracking is not yet available, and no order or delivery data is sent to any courier today.
When it launches, Botvee will only read the delivery status of a shipment from the courier the customer configures, using that customer's own courier credentials. The only value Botvee sends will be the tracking number; the End-User's name, address, and phone number will not be transmitted to the courier. What comes back — status, current location, and estimated delivery — is stored against the order in the customer's own workspace. Botvee does not book shipments and is not the route by which an order reaches a courier.
International Transfers
For transfers of EU/UK/Swiss personal data to sub-processors in countries not recognised as adequate, Botvee relies, where applicable, on: the EU Standard Contractual Clauses (Commission Decision 2021/914) in the applicable module (Module 2 controller-to-processor; Module 3 processor-to-sub-processor); the UK IDTA or Addendum for UK data; safeguards recognised under the Swiss FADP for Swiss data; and supplementary measures such as encryption and access controls. Pakistan-based processing is supported by contractual safeguards with international sub-processors, in anticipation of the Personal Data Protection Bill's enactment.
Sub-Processor Change Notice
Botvee will notify registered customers by email, and/or update this page, at least 14 days before adding a new sub-processor or making a material change. Customers who have executed a DPA may object on reasonable data-protection grounds within the notice period (GDPR Art. 28(2)); to object, email legal@botvee.ai (subject: "Sub-Processor Objection — [Company Name]"). If a reasonable objection cannot be resolved with a commercially reasonable alternative, the customer's remedy is to discontinue the affected part of the Service.
Requesting Sub-Processor Information
For further detail about any sub-processor, email legal@botvee.ai (subject: "Sub-Processor Information Request").
Contact
Legal / DPA
Company
BOTVEE (PRIVATE) LIMITED (SECP: 0326112)
Postal
Ward No. 3, Near Government Boys High School, Golarchi, District Badin, Sindh 72220, Pakistan
BOTVEE (PRIVATE) LIMITED