Spreelytics·Legal
Sub-processors
Spreelytics uses a few other companies to run the service. The ones below process the data you collect with Spreelytics, so they are our sub-processors under our Data Processing Agreement. Each one is bound by data protection terms at least as protective as the DPA, and we stay responsible for them.
Sub-processors
| Sub-processor | What it does | Location |
|---|---|---|
| Amazon Web Services, Inc. | Hosts Spreelytics: servers, databases, storage and backups. Works out each visitor's approximate location from their IP address. Sends our emails, including the notifications you set up | United States (Ohio). Requests reach it through AWS's worldwide edge network |
| Fireworks.ai, Inc. | Runs Ask AI, the assistant in the app. It may not use your data to train or improve any model | United States |
Ask AI. When someone on your team asks Ask AI a question, the question and the analytics the assistant reads to answer it go to Fireworks.ai. That can include an identified visitor's name or email address. If nobody on your team uses Ask AI, nothing goes to it.
Not sub-processors
These handle details of your account, not the data you collect with Spreelytics. We are the controller for those details, so our Privacy Policy covers them:
- Stripe: payments for your Spreelytics plan.
- Crisp: the support chat in the app.
- Google: signing in with Google.
Services you connect yourself
When you connect one of these with your own account or API key, data moves between it and Spreelytics on your instruction, under your own agreement with that company. It isn't our sub-processor (clause 6.6 of the DPA).
- Payment providers: Stripe, Paddle, Polar and Lemon Squeezy, to bring your payments in as revenue.
- Google Search Console, to show your search queries and pages.
- Slack, Discord and webhooks, for the notifications you set up.
- AI apps you connect to our MCP server, such as Claude, ChatGPT or Cursor.
Where your data is stored
We store the data you collect with Spreelytics in the United States, with Amazon Web Services in Ohio (us-east-2). We don't offer an EU region yet.
International transfers
Spreeflo Ltd, which provides Spreelytics, is established in the United Kingdom. Transfers from the EEA to the UK rely on the European Commission's adequacy decision for the United Kingdom, renewed on 19 December 2025 and in force until 27 December 2031.
Transfers to sub-processors outside the UK and the EEA are covered by the EU Standard Contractual Clauses together with the UK International Data Transfer Addendum and, where the company is certified, by the EU-US Data Privacy Framework and its UK Extension.
Changes to this list
We tell you at least 30 days before a new sub-processor starts processing your data: we email the admins of every team and update this page. If you object on reasonable data protection grounds, email contact@spreelytics.com within those 30 days. Clause 6.4 of our Data Processing Agreement says what happens next.
Questions: contact@spreelytics.com