Snapshot 35933
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Languages ZeroBounce List of Sub-processors and Service Providers What is a Sub-Processor? A sub-processor is a third party engaged by a data processor to perform specific processing activities on behalf of a data controller. In the context of data protection and privacy regulations, such as the General Data Protection Regulation (GDPR), the following roles are defined: Data Controller: The entity that determines the purposes and means of processing personal data. Data Processor: The entity that processes personal data on behalf of the data controller. Sub-Processor: Any third party that the data processor uses to assist in processing the personal data. In our case, in connection with ZeroBounce’s services such as email validationⓘ and list cleaning, a ZeroBounce customer (who acts as a data controller) outsources its data processing to a service provider (data processor - ZeroBounce). The service provider then hires another company (sub-processor) to perform some specialized task, like data storage. That third company becomes a sub-processor. Under laws like the GDPR, data processors are required to obtain the controller's authorization before engaging sub-processors. Also, they must ensure that sub-processors adhere to the same data protection obligations as the original processor. Due Diligence ZeroBounce is committed to conducting thorough due diligence when engaging with third parties, ensuring that they are assessed prior to onboarding and as part of our annual risk management program. We hold our service providers to strict contractual obligations, requiring them to process personal data solely for the purpose of delivering services to ZeroBounce. These contracts ensure that service providers comply with our commitments to ZeroBounce customers and adhere to applicable data protection laws. List of Sub-processors Sub-processors involved in processing customer registration data Name Exchanged data Purpose LinkedIn Ads Email address and cookie tracking data Ad placement Google Ads Email address and cookie tracking data Ad placement Microsoft Email address and cookie tracking data Ad placement Meta Email address and cookie tracking data Ad placement Outbrain Email address and cookie tracking data Ad placement Taboola Email address and cookie tracking data Ad placement Quantcast Email address and cookie tracking data Ad placement Reddit Email address and cookie tracking data Ad placement Quora Email address and cookie tracking data Ad placement Hubspot Email address Marketing aggregator Zapier Email address Marketing aggregator Zendesk Email address Customer service ticketing and communication; also used in the limited instance where a customer submits a request for support using our chat function/form. OpenAI name, email address, purchase details, payment details and customer behaviour Used to generate analytical reports and insights on ad performance, payment activity, subscription churn, and customer support interactions by processing pseudonymized operational data to identify trends, improve decision-making, and enhance user experience. Anthropic name, email address, purchase details, payment details and customer behaviour Used to generate analytical reports and insights on ad performance, payment activity, subscription churn, and customer support interactions by processing pseudonymized operational data to identify trends, improve decision-making, and enhance user experience. Mailchimp Email address Used as a backup provider to send transactional emails by processing recipient email addresses, message content, and delivery metadata to ensure reliable communication delivery. TrustPilot Email address To send review invitations and collect genuine user feedback about our services. G2 Email address To send review invitations and collect genuine user feedback about our services. Sub-processors involved in the email validationⓘ process Name Exchanged data Purpose Cloudflare Email address Perimeter security, Web application firewall (WAF). Customer email addresses will be logged only in the case of API validation calls if the customer exceeds the technical recommendation of product usage (e.g., sending request limits, IP violations, etc.) Amazon Web Services Email address Regional Data Residency. Facilitates localized storage of validation files within the customer's preferred geographic region to ensure compliance with local data sovereignty requirements. Cloudflare - email address, purpose: perimeter security, web application firewall. Customer email address will be logged only in case of API calls validation if the client exceeds technical recommendation of product usage (e.g., sending request limits, IP violations etc.). List of Service Providers ZeroBounce works with the service providers listed below for email validationⓘ service delivery. Name Purpose of processing Exchanged data Entity country Okta Identity management provider Email address US Stripe Payment gateway Cardholder data US PayPal Payment gateway Cardholder data US M247 Infrastructure hosting & internet provider none EU DigitalRealty Colocation hosting provider none US Equinix Colocation hosting provider none US Cogent Internet provider none US NTT Internet provider none US Cloudflare Internet provider none US Atlassian Project management Limited email address US DocuSign Electronic Signatures Business User Data US Calendly Meeting Organizer Business User Data US Qwilr Quote Tool Business User Data US Slack Communication Tool Limited email address US Updates to this page Given the global scope of our business and the large number of customers we serve, our business needs and service providers may change periodically. For instance, we may discontinue a service provider to streamline and reduce the number of providers we use or add a new service provider if it improves our ability to deliver our email validationⓘ service. We will regularly update this page to reflect any changes, including the addition or removal of service providers or sub-processors.