Sub-Processors
1. Introduction
This page lists the third-party service providers (“sub-processors”) that LoopHQ (operated by PROXYGIST LLC, doing business as LOOP) uses to deliver the Service. Some sub-processors are used for every customer; others are activated only when a customer opts in to a specific feature.
For details on what data we share and why, see Privacy Policy § 8. For the broader terms governing your use of the Service, see our Terms of Service.
2. Definitions
Sub-processor: A third party engaged by LoopHQ to process personal data on our behalf in connection with delivering the Service.
Always-on: Engaged for every customer because it is part of the core Service.
Opt-in: Engaged only when a customer turns on or connects a specific feature (for example, a CRM integration or messaging channel). Customers who do not enable that feature do not have data shared with that sub-processor.
3. Current Sub-Processors
Each provider name below links to that provider’s website, where you can find their privacy policy, security documentation, and certifications.
| Provider | Category | Location | Status |
|---|---|---|---|
| Supabase | Database, authentication, real-time messaging, storage | United States | Always-on |
| Vercel | Application hosting, content delivery, analytics | United States and global edge | Always-on |
| Upstash | Rate-limit cache | United States | Always-on |
| OpenAI | AI model provider | United States | Always-on |
| Anthropic | AI model provider | United States | Always-on |
| Google AI | AI model provider | United States | Always-on |
| Voyage AI | Search relevance scoring | United States | Always-on |
| Stripe | Payment processing and billing | United States | Always-on |
| Resend | Transactional email delivery | United States | Always-on |
| Microsoft (Clarity) | Marketing-page behavioral analytics | United States | Always-on (marketing and account pages only) |
| PostHog | Marketing-page behavioral analytics | United States | Always-on (marketing and account pages only) |
| Jina AI | Web page text extraction (knowledge base) | United States and EU | Always-on |
| Meta | Facebook Messenger delivery | United States and global | Opt-in (when you connect a Facebook Page) |
| Twilio | SMS and voice messaging delivery, A2P 10DLC compliance, phone number provisioning | United States | Opt-in (when SMS or voice is enabled for any agent) |
| Google (Calendar API) | Calendar availability and event creation | United States | Opt-in (when you connect Google Calendar) |
| HubSpot | CRM integration | United States and EU | Opt-in |
| GoHighLevel | CRM integration | United States | Opt-in |
| Zapier | Workflow automation | United States | Opt-in |
| Customer-configured webhooks | Outbound event delivery to your endpoints | Wherever you host the endpoint | Opt-in |
AI providers: Visitor messages and the relevant portions of your knowledge base needed to generate a response may be processed by any of the AI providers above. None of our AI providers are authorized to use Loop customer or visitor data to train their models. See Privacy Policy § 9.
4. Notification of Changes
We update this list when we add, change, or remove a sub-processor. Material changes (the addition of a new always-on sub-processor that processes personal data) will be announced through the LoopHQ dashboard with at least 30 days’ notice before the change takes effect, where reasonably practicable.
Customers who would like to receive change notifications by email may subscribe by contacting privacy@loophq.dev with the subject line “Sub-processor change notifications.”
5. Contact
Questions about our sub-processors or data processing practices can be sent to:
PROXYGIST LLC, doing business as LOOP
Privacy inquiries: privacy@loophq.dev
Website: loophq.dev