Inbox2Sheet Subprocessors
Trusted third-party providers that support our service delivery
Last updated: Aug 30, 2025
Bobook Limited uses trusted third-party providers ("Subprocessors") to support the delivery of the Inbox2Sheet service. These providers may process personal data on our behalf.
You will be notified at least 30 days in advance of any changes to this list. Objections may be raised by contacting privacy@inbox2sheet.com.
Current Subprocessors
| Vendor | Purpose | Data Processed | Location | Transfer Mechanism |
|---|---|---|---|---|
| OpenAI | AI-powered extraction & chat assistant | Email text, extracted fields, chat prompts/responses | EU/US (configurable) | EU Data Residency / SCCs / DPF |
| Mailgun (Sinch) | Email ingestion & routing | Forwarded emails (headers, body, attachments) | EU (default region) | Data processed in EU region |
| Google Cloud / Google Sheets | Data storage, sheet integration | Structured rows, metadata, account info | EU/US | Google DPA & SCCs |
| Stripe | Payment processing | Billing details, name, email | EU/US | SCCs / DPF participation |
| Hosting (Vercel / AWS / DigitalOcean) | Infrastructure hosting | Logs, account data, metadata | EU/US | SCCs / DPF |
| Analytics (Plausible / GA4) | Usage analytics (optional cookies) | Page views, device/browser info, IP (anonymized where possible) | EU/US | SCCs / DPF |
| Error Tracking (Sentry / equivalent) | Monitoring & debugging | Error logs, technical data | EU/US | SCCs / DPF |
OpenAI
AI-powered extraction & chat assistant
Email text, extracted fields, chat prompts/responses
EU/US (configurable)
EU Data Residency / SCCs / DPF
Mailgun (Sinch)
Email ingestion & routing
Forwarded emails (headers, body, attachments)
EU (default region)
Data processed in EU region
Google Cloud / Google Sheets
Data storage, sheet integration
Structured rows, metadata, account info
EU/US
Google DPA & SCCs
Stripe
Payment processing
Billing details, name, email
EU/US
SCCs / DPF participation
Hosting (Vercel / AWS / DigitalOcean)
Infrastructure hosting
Logs, account data, metadata
EU/US
SCCs / DPF
Analytics (Plausible / GA4)
Usage analytics (optional cookies)
Page views, device/browser info, IP (anonymized where possible)
EU/US
SCCs / DPF
Error Tracking (Sentry / equivalent)
Monitoring & debugging
Error logs, technical data
EU/US
SCCs / DPF
Notes
- •EU-first routing: Email ingestion (Mailgun) is provisioned in EU data centers by default.
- •OpenAI: API requests can be configured for EU data residency with zero retention. By default, OpenAI retains data ≤30 days but does not use it for training.
- •User control: Customers may delete data anytime from their dashboard.
Change Notifications
- •Any new subprocessor will be announced via email to account owners and on this page.
- •Customers may object within 30 days of notice. If objection is unresolved, they may terminate under the DPA.
Questions about our subprocessors?