Sub-processors

• Anthropic (Anthropic, PBC)

  What it does for Dripl

  Runs the AI models behind AI Studio, under Dripl’s Anthropic account (the same account as the contact-form drafts in table 3). Under its commercial terms, Anthropic does not use this data to train its models.

  Data it receives

  Message text from tracked chats, with usernames, the phone numbers we can recognise and email addresses masked and without its author; tracked chats’ names (masked) and usernames; figures computed by Dripl; for campaign suggestions and plans (paid placements, KPIs, campaign plans), the campaign’s details and results, the workspace’s channel names and niches and the public channels Telegram recommends next to them; what the workspace’s team types into AI Studio (questions, instructions, campaign drafts). Background batches are deleted at Anthropic once their results are in.

  Location

  United States

  When

  When the workspace uses AI Studio

• Hostinger (Hostinger International Ltd)

  What it does for Dripl

  Runs the servers, the database and the queue that hold all Dripl data, the AI Studio worker included.

  Data it receives

  Everything Dripl stores.

  Location

  Germany: Frankfurt am Main (European Union)

  When

  Always

• Microsoft (Microsoft 365, Exchange Online)

  What it does for Dripl

  Sends account, team, notification and billing emails. For AI Studio: scheduled and campaign end reports (title, period and written summary, never an excerpt) and campaign-pause notices.

  Data it receives

  Recipient email addresses, names, and the email content.

  Location

  United States. Safeguard: the Microsoft Products and Services Data Protection Addendum, which includes the EU Standard Contractual Clauses; Microsoft is certified under the EU-US Data Privacy Framework.

  When

  When an email is sent

• Sentry (Functional Software, Inc.)

  What it does for Dripl

  Error monitoring, when switched on.

  Data it receives

  Error reports with the user ID, and, around an error on a signed-in page, a short screen replay with all text and inputs masked. Error reports that pass through AI Studio, the worker, short links, or the AI and Telegram libraries lose their variables, and their error messages are cut to the first line. Cookies and authorization headers are left out.

  Location

  European Union (Sentry’s EU data region)

  When

  When error monitoring is switched on

Delivery networks that carry only end-to-end-encrypted notifications (not sub-processors). The browser push services of Apple, Google, Mozilla and Microsoft (depending on the browser) deliver notifications to the devices where a person turned them on. Each notification is encrypted so that only that device can read it: a title, a short line and a link, never message text. AI Studio pushes carry a line written by our code, which may name a tracked chat (by its masked name or its @username) or a campaign. These services can be outside the EU (for example in the United States). They are used only if a person turns on push notifications.

• Telegram

  Role

  Your workspace’s connected accounts use Telegram’s API to send, forward and read messages. In AI Studio they also read the chats you add. Telegram runs its own service under its own terms and privacy policy.

These services handle data Dripl is responsible for itself: billing and its public website. They do not process your workspace’s content.

• Stripe

  Purpose

  Card payments, wallets, subscriptions, invoices, AI credit packs and message top-ups.

  When

  When you pay by card (including Apple Pay and Google Pay)

• DePay

  Purpose

  Crypto payments.

  When

  When you pay with crypto

• Google Analytics

  Purpose

  Visits to the public pages.

  When

  Only if a visitor accepts analytics cookies

• Anthropic (contact form)

  Purpose

  Drafts replies to contact-form messages. A person reviews every reply.

  When

  When someone writes through the contact form