Sub-processors
SnowSEO engages a number of third-party sub-processors to help deliver and operate our services. This page lists those sub-processors, what they are used for, and the categories of personal data they may process.
Hosting regions below reflect each provider's primary or configured location and may vary by plan or product area. Where personal data is transferred internationally, we rely on appropriate safeguards (see our Privacy Policy). For a copy of our Data Processing Agreement or a specific sub-processor's terms, contact [email protected].
About this list
A "sub-processor" is a third party engaged by SnowSEO (operated by Kapybara LLC) that may process personal data on our behalf in order to provide part of the service. We enter into data processing terms with our sub-processors and review them for appropriate security and confidentiality safeguards.
Our Data Processing Agreement, including details of international transfers and safeguards, is available on our Data Processing Agreement page.
Analytics & product measurement
| Sub-processor | Purpose | Data categories | Region |
|---|---|---|---|
| Google Analytics 4 (Google) | Website and product analytics — traffic and engagement. | Online identifiers (analytics cookie/ID), IP address, device/browser, page and event data. | Global (Google) |
| PostHog | Product analytics and feature-usage measurement. | Online identifiers (distinct ID), IP address, device/browser, in-app events; user identity once signed in. | United States |
| Datafast | Privacy-focused web analytics and server-side conversion tracking. | Visitor/session ID, user ID, name, IP address, conversion metadata. | Global |
| Snow Analytics | First-party-proxied web analytics and attribution. | Visitor IP address, user-agent, page/event payload, attribution data. | Global |
Marketing, email & affiliate
| Sub-processor | Purpose | Data categories | Region |
|---|---|---|---|
| Plunk | Email delivery — marketing/lifecycle campaigns and transactional emails (sign-in links, one-time codes, account notifications). Built on Amazon SES. | Email address, name, sign-in provider, plan/subscription status, behavioural events, and email content (incl. magic links / one-time codes). | Amazon SES (AWS), Plunk-managed |
| Tolt | Affiliate and referral attribution for partner links. | Referral/affiliate identifiers, online identifiers, referral-to-signup attribution. | Global |
Customer support
| Sub-processor | Purpose | Data categories | Region |
|---|---|---|---|
| Intercom | In-app customer support and live chat messenger. | User ID, name, email, account creation date, plan/subscription status. | United States |
Billing & licensing
| Sub-processor | Purpose | Data categories | Region |
|---|---|---|---|
| Autumn | Billing, subscription entitlements, usage metering, checkout. | Customer ID, plan/subscription status, usage/credit balances, payment-lifecycle metadata. | United States |
| AppSumo | Lifetime-deal license redemption and fulfilment. | AppSumo license key, OAuth identity/email, plan/tier entitlement. | United States |
AI & content generation
| Sub-processor | Purpose | Data categories | Region |
|---|---|---|---|
| Azure OpenAI (Microsoft) | LLM text and image generation for content/SEO features. | Prompt and brand/content inputs and generated outputs (may contain personal data if supplied by the user). | United States (East US 2) |
| OpenRouter | LLM gateway/routing for text generation and web-search-backed answers. | Prompt and content inputs sent for inference (may contain personal data if supplied by the user). | United States |
| Langfuse | LLM prompt management and generation observability. | Prompt inputs/outputs and generation traces (may contain user-supplied content). | European Union |
Search & web data (SEO/AI features)
| Sub-processor | Purpose | Data categories | Region |
|---|---|---|---|
| Exa | Web search backend for AI- and search-augmented generation. | Search queries (user-supplied topic/brand text). | United States |
| Brave Search API | Web/news/image search for tooling and SERP data. | Search query terms (user-supplied). | United States |
| Firecrawl | Crawling/scraping target websites for audits and analysis. | Target site URLs and content being analysed. | United States |
| Scrape.do | SERP/page scraping fallback for rank tracking. | Search queries and target URLs. | Global |
| Google Ads Keyword Planner (Google) | Keyword research and search-volume data. | Keyword query strings (user-supplied). | Global (Google) |
Authentication & bot protection
| Sub-processor | Purpose | Data categories | Region |
|---|---|---|---|
| Google OAuth (Google) | Federated sign-in (Sign in with Google). | Google account email, name, profile image, OAuth tokens. | Global (Google) |
| CAPTCHA provider (Cloudflare Turnstile / hCaptcha / reCAPTCHA) | Bot and abuse protection on authentication forms. | End-user IP address, browser/device and interaction signals used for bot scoring. | Global |
Hosting, storage & delivery
| Sub-processor | Purpose | Data categories | Region |
|---|---|---|---|
| Cloudflare | Network edge, CDN/WAF, and object storage (R2) for uploads, assets, and data exports. | Visitor IP and request metadata; user-uploaded files, avatars, and exported personal-data bundles (R2). | Global (R2 location: auto) |
| Database host (self-managed) | Primary application datastore. | All account/org personal data: names, emails, hashed credentials/sessions, content, settings. | Germany (EU) |
| Cache & queue host (self-managed) | Caching, rate-limit counters, sessions, and background jobs. | Session/auth state, rate-limit keys, and queued job payloads (may reference user content). | Germany (EU) |
Monitoring & error tracking
| Sub-processor | Purpose | Data categories | Region |
|---|---|---|---|
| Sentry | Backend error monitoring and exception tracking. | Error/stack traces and request metadata (PII minimised — no IP, cookies, email, or auth headers). | United States |
Sales & scheduling
| Sub-processor | Purpose | Data categories | Region |
|---|---|---|---|
| Cal.com | Demo booking / scheduling embed on the marketing site. | Name, email, and scheduling/meeting details entered in the booking widget. | United States |
Customer-authorised connections
When you connect your own third-party accounts, SnowSEO accesses data from those services on your instruction. You remain in control of these data sources and can disconnect them at any time:
- Google Search Console
- Google Analytics (customer-connected)
- Google PageSpeed Insights
- Bing Webmaster Tools (Microsoft)
- PostHog (customer-connected project)
Publishing destinations
When you choose to publish content, SnowSEO sends that content to the destination you connect. These platforms receive the content you author:
- WordPress
- Webflow
- Shopify
- Ghost
- Framer
- IndexNow
Changes to this list
We may update our sub-processors from time to time as our services evolve, and we will reflect material changes on this page. Enterprise customers with a signed Data Processing Agreement receive notice of new sub-processors in accordance with that agreement.
Contact Us
If you have questions about our sub-processors or data processing, please contact us at [email protected].
Kapybara LLC, 1309 Coffeen Avenue Ste 1200, Sheridan, WY 82801, United States.
Scale SEO & AI Insights Across Your Organization
Gain complete visibility into SEO and AI performance across your enterprise, with actionable insights for every team and brand.
Pages Per Session Increased by 260%
Top-3 keyword rankings increased by 46%
Domain Ratings increased by 3 Points
AI Visibility in the industry increased by 12%
Share of Voice in AI increased by 18%
Source Citations by AI increased by 24%
Website Traffic increase of 38% within 90 days