Subprocessors

1. About This List

This page lists the subprocessors that Getme Technologies Inc. ("Getme") engages to process personal information on behalf of our customers in providing the Services. It supports Section 7 (Sub-processors) of our Data Processing Addendum at /legal/dpa.

For each subprocessor we impose data protection obligations through a written contract that are substantially the same as those in our Data Processing Addendum, and we remain responsible for the subprocessor’s performance. Processing locations describe where a provider may process personal information; data may be transferred outside your province or country as described in the Data Processing Addendum.

Although personal information may be processed outside Canada, we remain accountable for it and use contractual and other means to provide a comparable level of protection while it is processed by our subprocessors, consistent with PIPEDA.

This list is current as of the "Last updated" date above and may change as our Services evolve. The specific vendors for general infrastructure categories are disclosed here as they are adopted and are available on request.

Stripe

Purpose: payment processing, subscriptions, and related fraud and identity checks.

Personal information processed: name, email, billing details, and payment metadata. Full card numbers and CVV codes are handled directly by Stripe as a PCI-compliant processor and are not stored on Getme’s servers.

Processing location: United States and other countries.

Privacy and data-processing terms: stripe.com/privacy and stripe.com/legal/dpa.

Shippo, Inc.

Purpose: shipping and logistics infrastructure — carrier rates, shipping labels, tracking, address validation, and shipping or customs documents.

Personal information processed: recipient name, shipping address and contact details, order information, and parcel information.

Processing location: United States.

Privacy and data-processing terms: privacy.goshippo.com.

Cloud Hosting, Backup & Infrastructure

Purpose: hosting, storage, backup, and operation of the Platform and customer data.

Personal information processed: all categories of personal information processed through the Services, as described in the Data Processing Addendum.

Processing location: Canada, the United States, or other jurisdictions, depending on the provider.

Privacy and data-processing terms: governed by the provider’s data-processing agreement; the current provider is available on request.

Email & Communications

Purpose: sending transactional and support communications (such as invoices, account notifications, and security alerts) and, where enabled, customer messaging.

Personal information processed: recipient name, email address, and the content of the relevant communication.

Processing location: Canada, the United States, or other jurisdictions, depending on the provider.

Privacy and data-processing terms: governed by the provider’s data-processing agreement; the current provider is available on request.

Video Conferencing (Zoom)

Purpose: onboarding, demos, and support meetings.

Personal information processed: name, email address, meeting metadata, and any information shared during a session.

Processing location: United States and other countries.

Privacy and data-processing terms: zoom.us/privacy.

Accounting, Invoicing & CRM Tools

Purpose: maintaining accounting, invoicing, and business records, and supporting customer relationship management.

Personal information processed: contact details, transaction and invoice details, and related business records.

Processing location: Canada, the United States, or other jurisdictions, depending on the provider.

Privacy and data-processing terms: governed by the provider’s data-processing agreement; the current provider is available on request.

AI & Automation Providers

Purpose: where AI-assisted features are enabled, processing prompts and inputs to generate, summarize, translate, classify, or suggest business content.

Personal information processed: the prompts, instructions, merchant content, customer messages, uploaded files, and related metadata you submit to AI-assisted features, together with the generated outputs. You should not submit full card numbers, CVV codes, or other highly sensitive information to these features.

Providers: OpenAI (ChatGPT and GPT models), Anthropic (Claude), and Google (Gemini). The specific provider may vary by feature, and we may add or change AI providers as the Services evolve.

Processing location: United States and other countries.

Privacy and data-processing terms: openai.com/policies, anthropic.com/legal/privacy, and policies.google.com/privacy. Customer Personal Information submitted to AI-assisted features is not used to train, fine-tune, or improve these providers’ models unless expressly agreed in writing, consistent with our Data Processing Addendum.

Changes and Objections

We will give reasonable advance notice (for example, by updating this page or by notice through the Platform) before adding or replacing a subprocessor that processes personal information, so that customers have an opportunity to object on reasonable data-protection grounds, as described in our Data Processing Addendum.

Questions or objections regarding subprocessors can be sent to our Privacy Officer at [email protected].