Legal
OverviewTerms of ServiceAcceptable Use PolicyAI TermsPrivacy PolicyRefund PolicyData Processing AddendumSub-processorsService Level AgreementCookies StatementData Act AddendumTrust CenterBourbon Science Inc.
This page lists the sub-processors and service providers Zoko engages to help provide the Services, as required by Section 5 of our Data Processing Addendum, of which it forms part.
We give at least thirty (30) days' notice before adding or replacing a sub-processor that processes customer personal data. To receive those notifications by email, write to contact@zoko.io with the subject line "Sub-processor notifications".
We list providers comprehensively, including those that process only limited or non-personal data, so that this page gives a complete picture of who is involved in delivering the Services and running our business.
The location shown is the jurisdiction in which the entity is established. Where personal data is transferred outside the United Kingdom, the European Economic Area, or another jurisdiction with transfer restrictions, we rely on the safeguards described in Section 6 of the Data Processing Addendum.
| Entity | Purpose of processing | Entity location |
|---|---|---|
| Meta Platforms, Inc. | WhatsApp Business Platform and Meta messaging channels, used to process and deliver messages as part of the Services | United States |
| Shopify Inc. | Platform hosting, authentication, and app infrastructure | Canada |
| OpenAI, L.L.C. | Large language model API used to power AI Features, including AI agents and reply suggestions | United States |
| Anthropic, PBC | Large language model API used to power AI Features, including AI agents and reply suggestions | United States |
| Zapier, Inc. | Workflow automation connecting the platform with third-party applications at the customer's direction | United States |
Zoko contractually restricts its AI providers from using Customer Content to train or otherwise improve their models or services for general use, as stated in the Zoko AI Terms.
Section 13 of the Terms of Service explains the separate position of platforms that you connect to your own Account. Where you connect your own WhatsApp Business Account, Shopify store, or AI provider account, that provider also acts under its own terms directly with you, and Section 9 below sets out that distinction.
| Entity | Purpose of processing | Entity location |
|---|---|---|
| Hetzner Online GmbH | Cloud infrastructure and data hosting, including self-hosted database systems | Germany |
| Amazon Web Services, Inc. | Image and file storage, and frontend deployment | United States |
| Google LLC (Google Cloud Platform) | Cloud storage and message queuing for webhooks | United States |
| Google LLC (Firebase, Google Cloud Identity) | Authentication and identity management | United States |
| Cloudflare, Inc. | Content delivery network, DNS, DDoS protection, and traffic security | United States |
| Elasticsearch B.V. | Search and indexing of platform data | Netherlands |
| MongoDB, Inc. | Document database for platform data | United States |
| Redis Ltd. | In-memory caching and queuing | Israel |
Zoko also operates self-hosted open-source database software, including PostgreSQL and Apache Cassandra, on the infrastructure listed above. These are software components rather than separate service providers, and no personal data is disclosed to a third party by their use.
| Entity | Purpose of processing | Entity location |
|---|---|---|
| Google LLC (Google Analytics) | Website and product usage analytics | United States |
| Mixpanel, Inc. | Product analytics, metadata only | United States |
| PostHog Inc. | Product analytics, feature flags, and session recording, metadata only | United States |
| Microsoft Corporation (Microsoft Clarity) | Session replay and behaviour analytics | United States |
| Twilio Inc. (Segment) | Customer data platform, collecting and routing product and website usage events | United States |
| SmartBear Software, Inc. (BugSnag) | Error monitoring and crash reporting | United States |
| Functional Software, Inc. (Sentry) | Error tracking and performance monitoring | United States |
| Datadog, Inc. | Infrastructure monitoring and log aggregation | United States |
| Grafana Labs | Monitoring, alerting, and observability | United States |
| Entity | Purpose of processing | Entity location |
|---|---|---|
| Snowflake Inc. | Data warehousing for merchant and agent contacts, message metadata, and WhatsApp contact details | United States |
| Airbyte, Inc. | Data pipeline and transfer between internal systems | United States |
| Retool, Inc. | Internal administration tooling for merchant information, including email addresses and phone numbers | United States |
| GitHub, Inc. | Code repository, continuous integration, and AI coding assistance. No customer data is processed. | United States |
| Sprinto, Inc. | Compliance automation and security control monitoring | United States |
| Entity | Purpose of processing | Entity location |
|---|---|---|
| Stripe, Inc. | Subscription billing and payment processing. Merchant account data only. | United States |
This provider processes payments made by you to Zoko for your Subscription Plan. It is not involved in payments between you and your own customers, which Section 11.2 of the Terms of Service addresses.
| Entity | Purpose of processing | Entity location |
|---|---|---|
| Google LLC (Google Workspace) | Email, calendar, file storage, and document collaboration | United States |
| Slack Technologies, LLC | Internal messaging about customer projects | United States |
| Atlassian Pty Ltd (Jira, Trello) | Project, issue, and task tracking | Australia |
| Figma, Inc. | Design and collaboration on customer experience assets | United States |
| ActiveCampaign, LLC (Postmark) | Transactional email for billing and merchant communications. Merchant account data only. | United States |
| Close, Inc. | Customer relationship management for merchant contacts, communication history, and sales pipeline | United States |
| Webflow, Inc. | Hosting and content management for the Zoko marketing website | United States |
| Mintlify, Inc. | Hosting and authentication for Zoko product documentation | United States |
| CookieYes Limited | Cookie consent management and storage of consent preferences for the Zoko website | United Kingdom |
Zoko does not use a third-party helpdesk or ticketing product. Customer support runs on the Zoko platform itself and on Google Workspace, both of which are covered above, so support conversations are not disclosed to any additional provider.
| Entity | Purpose of processing | Entity location |
|---|---|---|
| X Corp. | Social media platform used for marketing | United States |
| Google LLC (YouTube) | Video platform used for marketing | United States |
| Google LLC (Google Ads, DoubleClick) | Advertising delivery and conversion measurement | United States |
| LinkedIn Corporation | Social media platform and advertising used for marketing | United States |
| Microsoft Corporation (Microsoft Advertising, Bing) | Advertising delivery and conversion measurement | United States |
Cookies set on our website, including those of advertising and analytics partners, are listed in full in our Cookies Statement.
Platforms you choose to connect to your Account under Section 13 of the Terms of Service act as separate controllers or as your own processors under their own terms, in addition to any role described in Section 2 above.
| Platform | Role |
|---|---|
| Meta Platforms, Inc. (WhatsApp, Facebook, Instagram) | Provider of the WhatsApp Business Platform. Where you connect your own WhatsApp Business Account, Meta also acts as a separate controller under its own terms with you. |
| Shopify Inc. | E-commerce platform connected at your instruction. Separate controller under its own terms with you. |
| AI provider accounts you connect under the Zoko AI Terms | Separate controller or your own processor, under your agreement with that provider. |
| Other integrations you connect, including payment, shipping, and CRM services | Separate controllers or your own processors |
Zoko is not responsible for how these platforms handle data, and queries about their processing must be raised with them directly.
Questions about this list can be sent to contact@zoko.io.
This list forms part of the Data Processing Addendum and the Zoko Terms of Service, and is governed by the laws of the State of Delaware, USA, in accordance with Section 24 of those Terms.
