Sub-processors
Last updated: 19 July 2026
WeefyBox uses a small set of providers to host the product, process payments and deliver messages. We only share the data each provider needs for its role.
| Category | Purpose | Data involved |
|---|---|---|
| Cloud infrastructure | Application hosting, database, queues and storage | Account, venue, guest and operational data |
| Stripe | Subscription billing and invoices | Account holder billing contact and Stripe customer references |
| Email providers | Transactional messages, campaigns and automation delivery | Recipient address, message body and delivery metadata |
| OpenAI | Grounded answers in the marketing-site buying concierge, when the AI provider is configured | The visitor question, recent chat context and retrieved WeefyBox product information; requests are sent with API response storage disabled |
Transfer safeguards
Where a provider processes data outside the UK or EEA, WeefyBox relies on appropriate safeguards such as adequacy decisions, Standard Contractual Clauses or the UK International Data Transfer Addendum.
Changes
We update this page when a material new sub-processor category is added and notify account holders where our DPA requires notice.