Sub-processors
Last updated 2026-11-07
Who handles data for us
These companies handle personal data so that we can run TheSerpAgent. Each entry says what it receives.
Hosting
Contabo GmbH, Germany, with servers in the EU. It hosts the app, the database and all files.
Search data
DataForSEO OU, Estonia, which also lists an address in Ukraine. It receives each search term with its location, language and device, for rankings, search volume and CPC. It receives nothing that identifies you or your domain. Its policy says it stores API tasks for 365 days.
Email delivery
Mailgun Technologies, Inc., a Sinch company, USA, on its US region. It receives recipients' addresses, sender names, subjects, email content and PDF reports.
Payments
Stripe Payments Europe, Limited, Ireland, with Stripe, LLC, USA, and Network International, LLC, the acquirer for Visa and Mastercard payments. They receive your email, your account name, your card and billing details, and payment records.
Sign-in
Google, USA. It receives your Google sign-in token if you choose to sign in with Google, and your IP address when its sign-in script loads.
AI summaries
None. Our own software writes project summaries automatically, so Anthropic and other AI providers receive nothing for them. If we start using one, it joins this list first, as Changes below describes.
What is not on this list
Your AI assistant's provider, Slack, your webhook and your report recipients are your own choices. They receive data because you send it to them, under your terms with them.
Changes
We update this page and email account owners at least 30 days before adding a provider that handles personal data you add. You can object as our Data Processing Addendum describes.