LEGAL
Sub-processors
BPI VENTURES GLOBAL – FZCO ("dtcpilot") engages the third-party service providers listed below ("Sub-processors") to help deliver the dtcpilot platform. Each Sub-processor may process personal data contained in Customer Data on our behalf, only for the purpose described, under a written agreement that includes data protection and security obligations no less protective than those in our Data Processing Addendum.
Before engaging a Sub-processor, we review its security and privacy practices. Where a Sub-processor processes personal data outside the country in which it was collected, the transfer is protected by Standard Contractual Clauses or equivalent contractual safeguards, as described in our Data Processing Addendum and Privacy Policy.
Current Sub-processors
| Sub-processor | Purpose | Data location | Transfer safeguard |
|---|---|---|---|
| Cloudflare, Inc. | Content delivery network, DNS, website hosting, email routing and object storage | Global | Standard Contractual Clauses / equivalent contractual safeguards |
| Render Services, Inc. | Application hosting | United States | Standard Contractual Clauses / equivalent contractual safeguards |
| Neon, Inc. | Managed PostgreSQL database | United States | Standard Contractual Clauses / equivalent contractual safeguards |
| Resend, Inc. | Transactional email delivery | United States | Standard Contractual Clauses / equivalent contractual safeguards |
| Stripe, Inc. / Stripe Payments Europe, Limited | Payment processing for dtcpilot's own subscription billing | Global | Standard Contractual Clauses / equivalent contractual safeguards |
| Anthropic, PBC | AI model provider | United States | Standard Contractual Clauses / equivalent contractual safeguards |
| OpenAI, L.L.C. | AI model provider | United States | Standard Contractual Clauses / equivalent contractual safeguards |
| Google LLC | Google Cloud and Gemini AI models | Global | Standard Contractual Clauses / equivalent contractual safeguards |
AI model providers
We use Anthropic, OpenAI and Google through their business APIs, under terms that prohibit them from using API inputs and outputs to train their models. They may retain API data for a limited period solely to provide the service and to monitor for abuse. We send them only the data needed for the AI feature you use. See Section 5 of our Privacy Policy.
Integrations you connect are not Sub-processors
dtcpilot lets you connect your own accounts with third-party services, such as Shopify, Stripe, PayPal, Meta, Google Ads, TikTok, Klaviyo, ShipStation, TaxJar, Cloudflare, Slack, Triple Whale and CheckoutChamp. When you connect one of these services, you choose to exchange data between it and dtcpilot, and it processes that data under your own agreement with that provider. These are your company's own third-party services, not our Sub-processors, and they are not listed above. Where a provider, such as Stripe or Cloudflare, appears both in the table and among your integrations, the table covers only the services it provides to us.
Changes to this list
We will give at least 30 days' advance notice before a new Sub-processor begins processing Customer Data, by email to the account owner of each customer and by updating this page. If you have reasonable data protection grounds to object to a new Sub-processor, email [email protected] within the notice period. We will work with you in good faith to resolve the objection and, if we cannot, you may terminate the affected service as set out in Section 7 of our Data Processing Addendum.
Where a change is urgently needed to protect the security or continuity of the platform, we may give shorter notice and will explain why.
Contact
Questions about our Sub-processors can be sent to:
BPI VENTURES GLOBAL – FZCOIFZA Business Park, Building A1, Dubai Digital Park,
Dubai Silicon Oasis, Dubai, United Arab Emirates
Email: [email protected]
Related documents: Terms of Service, Privacy Policy, Data Processing Addendum and Cookie Policy.