Sub-processors

Version 2, last updated 2026-10-10

Draft, to be reviewed by a lawyer.

This page lists the sub-processors Vibel (operated by HAVA Export B.V., trading as Vibel) engages to provide the Service, as referenced in our Data Processing Agreement. A sub-processor is a vendor Vibel itself uses that may process personal data on our behalf. It does not include the tools you choose to connect to your own Vibel account (Klaviyo, Meta, and so on); those are listed separately below. Vibel only reads from most of them using the access you grant - the exception is conversion feedback to Meta, Google, Pinterest, and TikTok, described below.

Sub-processors Vibel engages

Name	Purpose	Data processed	Region
Supabase	Database, authentication, encrypted secrets vault, file storage	All application data: account, brand, connection metadata, synced store and integration data, OAuth tokens (in the encrypted vault, referenced only by id)	EU (Germany) and US
Vercel	Application hosting and edge network	All data in transit through the app, as HTTPS requests and responses; no independent storage of customer data	US
Anthropic	AI processing (Claude API) for ranking, summaries, and drafted content	The store, order, and reporting data needed to answer a given prompt, and prompts you write in the AI assistant. Not used to train Anthropic's models.	US
OpenAI	AI-visibility probing: asks a tracked search prompt to check whether your brand appears in the answer	The tracked prompt text you configure (e.g. a search query a shopper might ask). No personal or customer data.	US
Google (Gemini)	AI-visibility probing, same purpose as OpenAI above	The tracked prompt text you configure. No personal or customer data.	US
Perplexity	AI-visibility probing, same purpose as OpenAI above	The tracked prompt text you configure. No personal or customer data.	US
Resend	Transactional email (password reset, digests, alerts)	Recipient email address and the content of the transactional email sent	US
Stripe	Payment processing for the Vibel Connect account and the billing flows built on it	Billing and payout account details for the merchant or creator using that flow	US / EU
Shopify	App billing (subscription and usage-based charges) and the store connection itself	Billing events and the store, order, and customer data you grant Vibel access to at install	Global (Shopify-operated)

Legal entity names and precise data-center locations for each sub-processor are to be confirmed and will be added here once verified with each vendor.

Data sources you connect

If you choose to connect any of the following to your Vibel account, Vibel reads data from them using the access you grant, to power your own dashboard, watchers, and reports. Vibel does not write your Shopify or customer data into them, and they are not Vibel sub-processors in the sense above, since you hold the direct relationship with each one:

Shopify, Klaviyo, Meta Ads, Google Ads, GA4, Google Search Console, TikTok Shop, Pinterest, Stripe, AfterShip, Gorgias, Zendesk, Monday, QuickBooks Online, a connected IMAP mailbox.

Each source's own region and legal entity depends on your account with that provider, and is to be confirmed against your own agreement with them, not something Vibel can state on your behalf.

Conversion feedback destinations

If you turn on conversion feedback (Settings → Conversion feedback), Vibel sends the platforms below hashed shopper identifiers for qualifying orders, on your instruction, as described in our Privacy Policy. These are the only connected sources Vibel writes to; every other source in the list above is read-only.

Meta: Conversion feedback (Conversions API), so Meta can match your ad spend to the orders it drove
Google: Conversion feedback (enhanced conversions / Data Manager API), same purpose as Meta above
Pinterest: Conversion feedback, same purpose as Meta above
TikTok: Conversion feedback, same purpose as Meta above

Changes to this list

If Vibel adds a new sub-processor, we will update this page and give notice before the change takes effect, so you can review it. To be notified when this list changes, email us at the address below and ask to be added to the sub-processor notice list.

Assignment

We may assign or transfer this agreement, in whole or in part, to an affiliate or group company (including a successor entity operating Vibel) by giving you written notice; your rights under this agreement are not reduced by such a transfer.

Contact

Questions about this list: legal@getvibel.com.

Data Processing Agreement · Privacy · Security