Zipchat Labs · Study 001
1 in 3
shoppers open a chat with no product in mind.
What shoppers really ask before they buy from your brand?
Read the study All Zipchat Labs studiesAI platform
Why Zipchat: the AI platform How it works
See Zipchat on your own store Free store previewWorks with
All integrationsPartners
Resources
Zipchat Labs · Study 001
1 in 3
shoppers open a chat with no product in mind.
What shoppers really ask before they buy from your brand?
Read the study All Zipchat Labs studiesThe third-party providers that help Zipchat deliver its service.
Zipchat Inc. ("Zipchat") uses certain third-party providers ("Subprocessors") to help deliver the Services. A Subprocessor may process, store, or access customer information or personal data only as needed to provide its service to Zipchat.
Before it engages a Subprocessor, Zipchat reviews the provider's privacy and security practices. It enters into a written agreement that requires confidentiality, applicable data-protection duties, and transfer safeguards where required.
Subprocessors may use customer data only to perform their service for Zipchat. Zipchat's AI providers may not use it to train their models, as described in the Privacy Policy and the Terms.
Each Subprocessor receives only the data it needs to perform its service for Zipchat, and may not use that data for any other purpose.
Customer Data is stored in the United States, unless otherwise agreed in writing.
| Sub-processor | Category | What it processes | Where |
|---|---|---|---|
| Heroku (Salesforce) | Hosting | App servers, workers, database (chats, conversations, messages, leads, pages, configuration, billing), background job data | United States |
| AWS S3 | Storage | Inbound email and archive, archived data, search index import files | United States |
| Cloudinary | Storage | Chat attachments: shopper images, voice notes, email and social media images | United States |
| Pinecone | Vector database | Embeddings of merchant site and product content, price data | United States |
| Google Gemini | AI | Conversation content, tool results, product images, site page indexing, embeddings | United States |
| Microsoft Azure OpenAI | AI | Conversation content and tool results (fallback model for every conversation) | United States |
| OpenAI | AI | Embeddings of merchant content, conversation content, tool calls | United States |
| AWS Bedrock | AI | Conversation content, tool calls | United States |
| Anthropic | AI | Conversation content, tool calls | United States |
| Meta AI (LLM models) | AI | Conversation content, tool calls | United States |
| ElevenLabs | AI | Conversation content, tool calls | United States |
| TypeSafe | AI | Conversation content, tool calls | United States |
| Cloudflare | Network and security | All traffic to and from Zipchat, over HTTPS (content delivery, DNS and protection) | United States |
| New Relic | Monitoring | Performance traces and app events | United States |
| Segment | Analytics | Merchant user and account events | United States |
| Amplitude | Analytics | Dashboard product analytics (merchant users) | United States |
| Customer.io | Lifecycle email | Merchant user emails and lifecycle events | United States |
| Attio | CRM | Merchant accounts, users and AI agents | United States |
| Slack | Internal alerts | Merchant account and plan updates | United States |
| Beehiiv | Marketing pixel | Visits to signup, onboarding and dashboard pages | United States |
| OpenAI Ads | Marketing pixel | Visits to signup, onboarding and dashboard pages | United States |
AI providers include, but are not limited to, the names above. Zipchat may add or replace providers from time to time. Current AI providers process this data under zero-training terms. Some may retain limited data for observability or abuse monitoring.
These subprocessors receive data only when the condition in the table applies to the customer.
| Sub-processor | Category | What it processes | When it applies | Where |
|---|---|---|---|---|
| Shopify Billing | Payments | Subscription charges and install state | The store is on Shopify and billed through Shopify | United States |
| Stripe | Payments | Customer, subscription and payment data | The merchant is billed through Stripe (stores not on Shopify) | United States |
| Meta (WhatsApp, Messenger, Instagram) | Messaging | Shopper messages, phone numbers, profile IDs, media | The merchant connects WhatsApp, Messenger or Instagram | United States |
| Zendesk | Support | Escalated conversations and shopper contact details | The merchant connects the Zendesk channel | United States |
| Cloudflare | Security | Shopper IP address and browser signals for bot checks | The merchant turns on bot protection (off by default) | United States |
| E2B | Infrastructure | Custom tool inputs and API responses, which can include order and customer data | The merchant uses custom tools or skills, or connects a codebase | United States |
By using the Services, Customer gives Zipchat general authorization to engage Subprocessors, including the Subprocessors listed on this page and any Subprocessor Zipchat adds later under this section.
As the service evolves, Zipchat may add, replace or remove Subprocessors, or use an existing Subprocessor for additional tasks, at its discretion. Zipchat will update this page to show the current list. The date at the top of the page is the date of the latest change. For a new Subprocessor that will process Customer Data, Zipchat will also give notice by email to the address on the customer account at least 10 days before the new Subprocessor starts processing it, except where an urgent replacement is needed for security or service continuity, in which case Zipchat will give notice as soon as reasonably practicable.
Where data-protection law gives Customer the right to object to a new Subprocessor, Customer may object in writing to support@zipchat.ai within 10 days of the notice, on reasonable data-protection grounds. Zipchat will discuss the concern in good faith. If the parties cannot resolve it, Customer's only remedy is to stop using the affected part of the Services or to terminate the subscription under the Terms of Service.
Zipchat imposes on each Subprocessor data-protection obligations no less protective than those Zipchat owes Customer, and remains responsible for its Subprocessors' performance of those obligations, as described in the Privacy Policy and the Data Processing Addendum.
If you want to be notified of updates to this page, contact support@zipchat.ai.
Zipchat may update this list without amending the Terms of Service.
EU-U.S. DPF certified, GDPR & AI Act aligned4.9 on4.8 on
Built on your real products.
Ready in seconds. Free preview.
or