GDPR
Sub-processors
Last updated: November 10, 2026
To deliver the service, Flowgration relies on the providers listed below. Some only take part if you turn on the related feature. This list is updated when it changes and is governed by the Data Processing Agreement.
| Provider | Purpose | Data processed | Location | When it is used |
|---|---|---|---|---|
| Hostinger (VPS server) | Hosting of the application and backups. | All account data, encrypted in transit. | EU | Always |
| Neon | Managed PostgreSQL database. | All account and CRM data. | EU | Always |
| Stripe | Subscription billing and, if you connect it, payments from your customers. | Billing and payment data (card details never touch our servers). | EU / US (SCCs) | Always |
| Platform transactional email provider | Sending system emails: verification, security notices and welcome messages. | The user's name and email address. | Depends on provider | Always |
| OpenAI | Artificial intelligence features (assistant, drafting, analysis). | The text and context you send to the AI feature. | US (SCCs) | Only if you enable it |
| Anthropic | Alternative AI provider, only if configured on the platform. | The text and context you send to the AI feature. | US (SCCs) | Only if you enable it |
| Twilio | Sending SMS messages. | Recipient phone number and message content. | US (SCCs) | Only if you enable it |
| Meta (WhatsApp Business API) | Sending and receiving WhatsApp messages. | Recipient phone number and message content. | EU / US (SCCs) | Only if you enable it |
| Sentry | Error monitoring to keep the service stable. | Technical error information (may include user identifiers and IP address). | Depends on project region | Always |
| Telegram | Internal alerts to the Flowgration team (new accounts, contact requests and support messages). | Name and email of whoever signs up or writes to support. | Depends on provider | Flowgration internal use |
| Google (Analytics, Tag Manager and Ads) | Measurement and advertising on Flowgration's marketing websites. They do not process your CRM data. | Browsing data of marketing website visitors. | EU / US (SCCs) | Only with your consent |
Integrations you configure
If you connect your own sending or data accounts, those providers act on your behalf, with your credentials and their own terms. You can currently connect: Brevo, SendLayer, Mailgun, Postmark, SendGrid, Amazon SES, Gmail, Microsoft Outlook or your own SMTP server.
Changes to this list
We will announce sub-processor additions and replacements with reasonable notice, as set out in the Data Processing Agreement.