Legal
Subprocessors
The providers that process data for us to run VectorLeads, what each one does, what data it gets and where it is.
Last updated
On this page
1.About this list
Each provider gets only what it needs for the purpose shown and may use it only to provide its service to us. Locations are where each provider is based and, where it publishes it, where it processes data. How we protect transfers is described in our privacy policy.
2.Running VectorLeads
| Provider | Purpose | Data involved | Location |
|---|---|---|---|
| [hosting provider]Virtual private server | Hosts the app, the database and the job queue | Everything VectorLeads stores | [server location] |
| ClerkClerk, Inc. | Accounts and sign-in | Names, email addresses, sign-in method, IP addresses and device and session details of users | USA |
| PaddlePaddle.com Market Limited (Paddle.com Inc. for US buyers) | Checkout, payments, invoices and tax, as merchant of record | Billing name, email, address, payment details and tax ID; plan and transactions | UK; USA for US buyers |
| CloudflareCloudflare, Inc. | Serves the website and protects it from attacks (including the visitor’s country, used for privacy choices) and the bot check on the free audit form (Turnstile) | IP addresses and request details of every visit; browser signals of free audit visitors | USA; global network |
| Amazon Web ServicesAmazon Web Services, Inc. | File storage (Amazon S3) and encrypted database backups | Audit report PDFs and follower export files (24 hours); daily copies of the database, which hold everything VectorLeads stores (kept up to 45 days) | USA |
| SentryFunctional Software, Inc. | Error tracking | Error details, stack traces, page or job, browser and device type, user and workspace ids; email addresses and phone numbers removed, no IP addresses | USA |
| PostHogPostHog, Inc. | Product analytics and session recordings | Usage events with user and workspace ids; pages, clicks, scrolling, page speed, browser and device, approximate location (IP addresses discarded); recordings of signed-in app sessions with typing, email addresses and phone numbers hidden. Events never include names or email addresses | USA |
[hosting provider]
Virtual private server
- Purpose
- Hosts the app, the database and the job queue
- Data involved
- Everything VectorLeads stores
- Location
- [server location]
Clerk
Clerk, Inc.
- Purpose
- Accounts and sign-in
- Data involved
- Names, email addresses, sign-in method, IP addresses and device and session details of users
- Location
- USA
Paddle
Paddle.com Market Limited (Paddle.com Inc. for US buyers)
- Purpose
- Checkout, payments, invoices and tax, as merchant of record
- Data involved
- Billing name, email, address, payment details and tax ID; plan and transactions
- Location
- UK; USA for US buyers
Cloudflare
Cloudflare, Inc.
- Purpose
- Serves the website and protects it from attacks (including the visitor’s country, used for privacy choices) and the bot check on the free audit form (Turnstile)
- Data involved
- IP addresses and request details of every visit; browser signals of free audit visitors
- Location
- USA; global network
Amazon Web Services
Amazon Web Services, Inc.
- Purpose
- File storage (Amazon S3) and encrypted database backups
- Data involved
- Audit report PDFs and follower export files (24 hours); daily copies of the database, which hold everything VectorLeads stores (kept up to 45 days)
- Location
- USA
Sentry
Functional Software, Inc.
- Purpose
- Error tracking
- Data involved
- Error details, stack traces, page or job, browser and device type, user and workspace ids; email addresses and phone numbers removed, no IP addresses
- Location
- USA
PostHog
PostHog, Inc.
- Purpose
- Product analytics and session recordings
- Data involved
- Usage events with user and workspace ids; pages, clicks, scrolling, page speed, browser and device, approximate location (IP addresses discarded); recordings of signed-in app sessions with typing, email addresses and phone numbers hidden. Events never include names or email addresses
- Location
- USA
3.Business information
| Provider | Purpose | Data involved | Location |
|---|---|---|---|
| DataForSEODataForSEO OÜ | Google Maps listings, search results, reviews summary, business profiles, ads and AI answer checks | Search terms (a niche and a place), business names, domains and Google ids | Estonia |
| ApifyApify Technologies s.r.o. | Listings from Google Maps, Facebook pages and directories, Meta ads, and Instagram follower lists | Search terms, business names, website and social profile addresses | Czech Republic; data mainly in the EU and the USA |
| GoogleGoogle LLC (Google Cloud EMEA Limited, Ireland, for Cloud billing in the UK and EEA) | PageSpeed Insights, Web Risk, Gemini API (sorting businesses by type, AI answer checks) | Website addresses we check; search requests and business details | USA |
| PerplexityPerplexity AI, Inc. | AI answer checks | Questions such as “best dentist in Austin” and business names | USA |
DataForSEO
DataForSEO OÜ
- Purpose
- Google Maps listings, search results, reviews summary, business profiles, ads and AI answer checks
- Data involved
- Search terms (a niche and a place), business names, domains and Google ids
- Location
- Estonia
Apify
Apify Technologies s.r.o.
- Purpose
- Listings from Google Maps, Facebook pages and directories, Meta ads, and Instagram follower lists
- Data involved
- Search terms, business names, website and social profile addresses
- Location
- Czech Republic; data mainly in the EU and the USA
Google
Google LLC (Google Cloud EMEA Limited, Ireland, for Cloud billing in the UK and EEA)
- Purpose
- PageSpeed Insights, Web Risk, Gemini API (sorting businesses by type, AI answer checks)
- Data involved
- Website addresses we check; search requests and business details
- Location
- USA
Perplexity
Perplexity AI, Inc.
- Purpose
- AI answer checks
- Data involved
- Questions such as “best dentist in Austin” and business names
- Location
- USA
4.Finding and checking contacts
| Provider | Purpose | Data involved | Location |
|---|---|---|---|
| TryKittKitt AI | Finding owners’ work email addresses | A person’s name and the business’s domain | USA (hosting) |
| Anymail FinderAMF Internet Services Limited | Finding owners’ work email addresses | A person’s name and the business’s domain | UK; data in the USA and Germany |
| IcypeasIcypeas | Finding owners’ work email addresses | A person’s name and the business’s domain | France; data in the EEA |
| MillionVerifierSouthern Vector Limited | Checking that email addresses accept mail | Email addresses | New Zealand; data in New Zealand, Hungary, the EEA and the USA |
| Reoon Email VerifierReoon Technology | Checking that email addresses accept mail | Email addresses | Not published |
TryKitt
Kitt AI
- Purpose
- Finding owners’ work email addresses
- Data involved
- A person’s name and the business’s domain
- Location
- USA (hosting)
Anymail Finder
AMF Internet Services Limited
- Purpose
- Finding owners’ work email addresses
- Data involved
- A person’s name and the business’s domain
- Location
- UK; data in the USA and Germany
Icypeas
Icypeas
- Purpose
- Finding owners’ work email addresses
- Data involved
- A person’s name and the business’s domain
- Location
- France; data in the EEA
MillionVerifier
Southern Vector Limited
- Purpose
- Checking that email addresses accept mail
- Data involved
- Email addresses
- Location
- New Zealand; data in New Zealand, Hungary, the EEA and the USA
Reoon Email Verifier
Reoon Technology
- Purpose
- Checking that email addresses accept mail
- Data involved
- Email addresses
- Location
- Not published
6.Not on this list
- Tools you connect (Instantly, Smartlead, HubSpot, GoHighLevel, Google Sheets) receive what you push to them under your own account with them.
- Open data we download to our servers: Overture Maps Foundation places data (overturemaps.org, mostly under CDLA Permissive 2.0).
- Public security and software feeds that receive no personal data, only software names and versions: Wordfence Intelligence (Defiant, Inc.), the US National Vulnerability Database, OSV, the CISA Known Exploited Vulnerabilities catalog, endoflife.date and retire.js, plus public domain registration (RDAP) and DNS lookups.
5.Social data
HikerAPI
Not published
ScrapeCreators
Web Scraping Guy LLC
SocialData
Not published
EnsembleData
EnsembleData Pte. Ltd.
YouTube API Services
Google LLC