Subprocessors
The third parties that process our customers' data on our behalf, what they do, and where.
Version 1.0 · Last updated 7 October 2026
This document is not yet in effect. It takes effect once the company that operates Web Answerly is registered in Australia and its name, ABN and ACN appear below. Until then it describes how Web Answerly works and what we intend to commit to. Questions: legal@webanswerly.com.
Web Answerly is operated from Victoria, Australia. The operating company is being registered. Its legal name, ABN and ACN will appear here, and it will be the party to this document, before the document takes effect. In this document "Web Answerly", "we", "us" and "our" mean that company.
A subprocessor is a company we engage that may process personal information our customers entrust to us — their knowledge content and their End Users' conversations — to provide the Service. Each one is bound by a written agreement with data protection terms at least as protective as our Data Processing Addendum.
1. Subprocessors
| Subprocessor | What it does | Where data is processed |
|---|---|---|
| Supabase, Inc. | Database, authentication, file storage and search index | Sydney, Australia (Amazon Web Services) |
| Vercel, Inc. | Hosting of the web application and APIs, and delivery of the website and widget files | Application servers in Sydney, Australia; content delivery from a global network |
| Fly.io, Inc. | Background worker that crawls websites and indexes content | Sydney, Australia |
| OpenAI, L.L.C. | AI answer generation, embeddings for search, and (if a customer turns it on) voice transcription | United States |
| Plus Five Five, Inc. (Resend) | Sending email: sign-up and security emails, lead, handoff and booking notifications, and email-agent replies | United States |
2. Providers for our own business
These providers handle information about our own customers' accounts and our correspondence, not End User Data.
| Provider | What it does | Where |
|---|---|---|
| Stripe, Inc. and affiliates | Payments, subscriptions and invoices for our customers. Stripe also acts as an independent controller for fraud prevention and its legal obligations. | United States and other countries |
| Mailgun (Sinch Email) | Receiving email sent to our own webanswerly.com addresses | United States |
3. Supported but not in use
The Service can work with these providers, but none of them currently receives customer data. We will add one only through the notice process in section 5.
| Provider | What it would do |
|---|---|
| Upstash, Inc. | Rate limiting (we currently use our own database instead) |
| Cloudflare, Inc. (Turnstile) | Bot checks when a visitor exceeds abuse limits |
| Additional AI model providers | Answer generation with other models |
4. Services our customers connect
Customers can connect their own accounts and systems: Google (Drive and Calendar), Microsoft 365 (OneDrive, SharePoint and Outlook Calendar), Notion, GitHub, Confluence, Slack, Webflow, their own webhooks and APIs, and MCP servers. A visitor's browser may also provide speech recognition. These are not our subprocessors: the customer (or the visitor) chooses them and their own terms apply. Data flows to them only when a customer connects them and its agents use them.
5. Changes to this list
- We will give at least 30 days' notice before a new subprocessor starts processing customer data, by updating this page and emailing workspace owners.
- If you have a reasonable data protection objection, tell us at privacy@webanswerly.com within the notice period. We will work with you to resolve it. If we cannot, you may terminate the affected part of the Service before the change takes effect, and we will refund any fees you prepaid for the period after termination.
- If we must replace a subprocessor urgently, for example because it stops providing its service or a security risk requires it, we will notify you as soon as we can, and the same objection right applies.