Sub-Processors
Last Updated: October 2026
Introduction
AdPeak Ltd (“AdPeak”) uses third-party sub-processors to deliver and support its services. This page lists the current sub-processors that may process personal data on our behalf.
Customers will be notified at least 30 days before any new sub-processor is added, as set out in our Data Processing Addendum. Please refer to our Privacy Policy, Terms of Service, and Data Processing Addendum for full details on how we handle your data.
We select all sub-processors for their ability to provide an appropriate level of protection for personal data, and we enter into a written data processing agreement with each of them that imposes data-protection obligations no less protective than those in our own agreements with customers.
AI Model Providers
Our AI features (the AI assistant, agents, and natural-language analysis) are powered by large language model inference. We route inference to a primary provider and, when the primary provider is unavailable or at capacity, and for some specific tasks, to a fallback provider.
| Provider | Role | Purpose | Data Processed | Location | Safeguards | Privacy / DPA Link |
|---|---|---|---|---|---|---|
| Google Cloud — Vertex AI | Primary | Powers the AI assistant, agents, and natural-language analysis | Conversation content and attached files, memory file content used in a request, tool invocation parameters and results, and connected-account data included in a request | Google Cloud; requests may be processed outside the UK/EU | Inference under the Google Cloud Data Processing Addendum and Service Specific Terms; under those terms, prompts and responses are not used to train Google’s or any third party’s foundation models | Google Cloud Privacy |
| OpenRouter | Fallback | Routes requests to an upstream model provider when the primary provider is unavailable or at capacity, and for specific tasks | Same categories as above | OpenRouter and its upstream model providers; may be processed outside the UK/EU, including in the US | Under the applicable terms and our configured account settings, the data is not used to train models. The upstream providers we use are available on request | OpenRouter Privacy |
Infrastructure and Service Providers
| Provider | Purpose | Data Processed | Privacy / DPA Link |
|---|---|---|---|
| Google Cloud Platform | Cloud hosting, compute, database, file storage (including memory files), BigQuery data warehouse, logs | All platform data | Privacy · DPA |
| Firebase / Identity Platform (Google) | Authentication, two-factor authentication, web app hosting | User authentication data (email address, credentials, two-factor factors), session data | Privacy |
| Stripe | Payment processing, tax calculation | Billing information, billing country and VAT number, payment method data | Privacy · DPA |
| Resend | Transactional email delivery | Email address, name, organisation name, and email content (account, security, invitation, and task emails) | Privacy · DPA |
| Slack (Salesforce) | Assistant access and notification delivery in your Slack workspace | Message and notification content, Slack user and channel identifiers | Privacy |
| Twilio | WhatsApp messaging and delivery of task results, where available (messages are carried over Meta’s WhatsApp Business Platform) | Message content, phone numbers | Privacy · DPA |
AdPeak’s application database and servers are hosted on Google Cloud Platform in the United Kingdom (London), and our data warehouse and file storage in the European Union. Where any of the above services process personal data outside the UK/EEA, transfers are covered by the appropriate safeguards described in our Privacy Policy and Data Processing Addendum.
Services that you choose to connect to AdPeak — such as Google Ads, Google Merchant Center, Meta Ads, Shopify, your webhook destinations, or an MCP client — are not sub-processors: they are your own accounts and tools, and we exchange data with them on your instructions.
Sales and Marketing
| Provider | Purpose | Data Processed | Privacy / DPA Link |
|---|---|---|---|
| Attio | Customer relationship management, lead and free-report data, marketing communications | Name, business email address, connected Google Ads/Merchant Center account identifiers, advertising spend and performance summaries, communication and marketing-preference history | Privacy Policy |
| Google Analytics (Google) | Understanding how visitors use adpeak.ai. Only with the visitor’s consent via our cookie banner | Google Analytics cookies, pages viewed, browser and device information, and IP address | How Google uses data from partner sites |
| Lead Forensics | Identifying the businesses that visit adpeak.ai. Only with the visitor’s consent via our cookie banner | IP address of the visit, pages viewed, and the organisation identified from the IP address | Privacy Policy |
| Meta (Meta Platforms Ireland Limited for UK/EEA users; Meta Platforms, Inc. as applicable) | Measuring the effectiveness of AdPeak’s own advertising on Meta’s platforms (Meta Pixel and Conversions API). Only with the visitor’s consent via our cookie banner | Meta Pixel cookies (_fbp, _fbc) and page views on adpeak.ai and app.adpeak.ai; sign-up, trial-start and first-payment events with SHA-256-hashed email address, hashed user identifier, IP address, browser user agent and, for trials and payments, plan value and currency | Meta Privacy Policy · Business Tools Terms |
Note: See our Privacy Policy for how lead and free-report data is processed, and Section 12.3 of it for advertising measurement with Meta, including how to withdraw consent using the Cookie preferences link in our website footer. Meta also processes this data for its own purposes as described in its privacy policy.
Change Log
| Date | Change |
|---|---|
| October 2026 | Resend listed for transactional email delivery. Google Analytics and Lead Forensics listed under Sales and Marketing; both now load on adpeak.ai only with the visitor’s consent. Hosting and AI inference locations described in more detail: AI inference by Vertex AI and OpenRouter may take place outside the UK/EU. Slack, Stripe, Firebase and Twilio descriptions updated to match current use. |
| September 2026 | Meta added under Sales and Marketing for consent-based measurement of AdPeak’s own advertising (Meta Pixel and Conversions API). |
| July 2026 | AI inference moved to Google Vertex AI (primary) with OpenRouter as a zero-data-retention, UK/EU/US-only fallback. OpenAI and Anthropic removed as direct AI model sub-processors. Twilio added for WhatsApp / messaging notification delivery. Attio added as a Sales and Marketing (CRM) sub-processor for lead and free-report data. |
| April 2026 | Initial sub-processor list published. |
Contact
If you have questions about our sub-processors, please contact us at privacy@adpeak.ai.