Last updated: August 23, 2026
Artless Industries Inc. (“Artless,” “we,” “us,” or “our”) uses the third-party companies listed on this page (each, a “sub-processor”) to process personal data on behalf of Get Shouting customers when providing the Get Shouting platform and related services at www.getshouting.app, www.getshouting.com, and our other online offerings (collectively, the “Services”).
Sub-processors act (i) on our instructions as communicated through the Services and our agreements with customers; and (ii) under written terms that require appropriate technical and organizational measures for the protection of personal data. This list reflects sub-processors and integration partners used in our production environment as of the date above.
Duration of processing. For each sub-processor below, processing continues for as long as the customer uses the applicable feature(s) of the Services and for retention periods described in our Privacy Notice and customer agreements.
Updates. We may update this list from time to time. To request notification of material changes, contact support@getshouting.com.
Customer-authorized integrations. Some sub-processors listed in Section 3 process data only when a customer or authorized user connects that integration or directs us to transmit data to that platform (for example, connecting a Shopify store or Meta ad account). Those providers may also process data under their own terms as independent controllers for certain activities.
Not listed. Vendors we do not use in production (for example, legacy SMTP configuration), catalog-only references without live API use, and placeholder integrations not yet implemented are omitted.
Core hosting, database, storage, caching, and workflow services that underpin the Services.
| Sub-processor | Applicable service(s) | Subject matter | Nature and purpose of processing | Location(s) of processing | Security / privacy information |
|---|---|---|---|---|---|
| Vercel Inc. | Get Shouting Platform (application hosting, serverless functions, scheduled jobs) | Account data, customer materials, application logs, and metadata needed to operate the Services | Cloud hosting, content delivery, and serverless execution of the application | United States (primary) | Privacy; Security |
| Vercel Inc. (Speed Insights; optional KV) | Web performance monitoring; optional URL/metadata caching when KV is enabled | Performance metrics, page URLs, and non-content cache keys | Application performance analytics; optional edge caching | United States (primary) | Speed Insights |
| Supabase, Inc. | Get Shouting Platform (database, authentication, image storage) | User account information, brand and team data, customer materials, OAuth tokens, CRM records, campaign and analytics data stored in the platform | Managed PostgreSQL database, user authentication (email/password and configured OAuth providers), and object storage for images | United States (Artless production project region) | Privacy; Security |
| Amazon Web Services, Inc. (S3) | Video and large media storage; optional analytics aggregate storage | Uploaded videos, processed video variants and thumbnails, and de-identified usage aggregate files | Object storage for media assets and optional internal analytics artifacts | United States (AWS region configured for Artless production) | Data Privacy; Security |
| Amazon Web Services, Inc. (MediaConvert; SNS) | Video processing pipeline | Video files submitted for transcoding and job status notifications | Video transcoding and event notifications for completed processing jobs | United States (AWS region configured for Artless production) | Data Privacy |
| Upstash, Inc. | OAuth state, rate limiting, webhook deduplication, operational cache | Short-lived tokens, identifiers, IP-derived rate-limit keys, and operational metadata | Redis-backed cache and rate limiting for security and reliability | United States (primary) | Privacy; Security |
| Inngest, Inc. | Background jobs (for example, scheduled commerce content and analytics writes) | Job payloads containing customer and campaign identifiers and related operational data | Asynchronous workflow orchestration for long-running platform tasks | United States | Privacy; Security |
Providers that send messages, process subscriptions, or deliver content on our behalf.
| Sub-processor | Applicable service(s) | Subject matter | Nature and purpose of processing | Location(s) of processing | Security / privacy information |
|---|---|---|---|---|---|
| Resend, Inc. | Transactional email; Email CRM (campaigns, broadcasts, domain verification) | Recipient email addresses, message content, delivery events, and sending-domain DNS verification data | Email transmission, delivery tracking, and domain authentication for customer email programs | United States | Privacy; Security |
| Telnyx LLC | SMS CRM (when enabled); toll-free verification | Recipient phone numbers, SMS/MMS message content, delivery receipts, toll-free verification business data, and line-type lookup results | SMS/MMS delivery, compliance verification for toll-free messaging, and number provisioning/sync | United States | Privacy; Security |
| Stripe, Inc. | Get Shouting subscriptions and add-on billing (direct customers) | Billing contact details, subscription metadata, and payment method information processed by Stripe (Artless does not store full payment card numbers) | Payment processing, invoicing, customer portal, and subscription lifecycle management | United States and other regions where Stripe operates | Privacy; Security |
| Ayrshare, LLC | Organic social publishing, social analytics, and social inbox features | Social post content, media URLs, profile identifiers, scheduling metadata, analytics metrics, and direct-message content routed through connected profiles | API aggregation and delivery to connected social networks on customer instructions | United States | Privacy |
| X Corp. (OAuth credentials supplied to Ayrshare) | Connecting X (Twitter) profiles for publishing via Ayrshare | OAuth tokens and profile identifiers for linked X accounts | Authentication for X profile linking when customers connect X through Get Shouting | United States and other regions where X operates | Privacy |
Shopify App Store billing. Merchants who subscribe through the Shopify App Store are billed via Shopify Billing (Shopify Inc.), not Stripe. Subscription plans, add-ons, and one-time charges are created and collected through Shopify’s Billing API; charges appear on the merchant’s Shopify invoice. See the Shopify Inc. entry in Section 3 for related data processing. Direct customers who sign up at www.getshouting.app are billed through Stripe as described above.
Social networks reached through Ayrshare. When customers publish or analyze organic social content, data is transmitted to the platforms they connect (which may include Facebook, Instagram, LinkedIn, Pinterest, TikTok, YouTube, Threads, Bluesky, and Google Business Profile, depending on customer configuration). Those platforms process data under their own terms in addition to Ayrshare’s processing on our behalf.
Providers that process personal data when a customer or authorized user connects an integration or directs us to exchange data with that provider.
| Sub-processor | Applicable service(s) | Subject matter | Nature and purpose of processing | Location(s) of processing | Security / privacy information |
|---|---|---|---|---|---|
| Meta Platforms, Inc. | Paid Meta Ads (Marketing API); organic Facebook/Instagram via Ayrshare when connected | OAuth tokens, ad account and Page identifiers, pixel selections, ad creative assets, campaign structure, and advertising performance metrics | Publishing and managing paid campaigns on the customer’s Meta ad account; organic publishing/analytics when connected | United States, Ireland, and other regions where Meta operates | Privacy; Security |
| Google LLC (Google Ads API) | Paid Google Ads publish and reporting | OAuth tokens, Google Ads customer account identifiers, campaign and asset identifiers, ad creative assets, and advertising performance metrics | Creating and managing campaigns on the customer’s Google Ads account and syncing insights | United States and other regions where Google operates | Privacy; Security |
| Google LLC (Google Drive API) | Google Drive import and ad export (when used) | OAuth tokens and only the Drive files or folders the user selects in the Google picker, or files created in Drive by export | Importing creative assets and exporting ad files to the customer’s Google Drive (drive.file scope) |
United States and other regions where Google operates | Privacy |
| Google LLC (Sign-in via Supabase Auth) | Optional “Continue with Google” account login | Basic profile information (such as name and email) for authentication | Identity verification and account creation/sign-in | United States and other regions where Google operates | Privacy |
| Microsoft Corporation (Sign-in via Supabase Auth) | Optional Microsoft (Azure) account login | Basic profile information (such as name and email) for authentication | Identity verification and account creation/sign-in | United States and other regions where Microsoft operates | Privacy |
| Slack Technologies, LLC (Sign-in via Supabase Auth) | Optional Slack account login | Basic profile and workspace identity information for authentication | Identity verification and account creation/sign-in | United States and other regions where Slack operates | Privacy |
| Shopify Inc. | Shopify app install, catalog sync, webhooks, and Shopify Billing (App Store merchants) | Shop domain, OAuth tokens, product/catalog data, order and fulfillment metadata, and billing subscription records | E-commerce data sync, app billing, and webhook-driven store updates on customer authorization | Canada, United States, and other regions where Shopify operates | Privacy |
| Etsy, Inc. | Etsy shop connection and catalog sync | Shop identifiers, OAuth tokens, listing and shop metadata | E-commerce catalog synchronization on customer authorization | United States | Privacy |
| WooCommerce (Automattic-hosted stores using the REST integration) | WooCommerce store connection, catalog sync, and webhooks | Store URL, API credentials, product and order metadata | E-commerce catalog and order synchronization on customer authorization | Location depends on the customer’s WooCommerce hosting | Automattic Privacy |
| Canva Pty Ltd | Canva design import and ad export (when used) | OAuth tokens, design metadata, and exported image assets the customer selects | Importing and exporting creative assets between Canva and Get Shouting on customer authorization | Australia, United States, and other regions where Canva operates | Privacy |
Providers used for campaign AI features, product analytics, and internal operational reporting.
| Sub-processor | Applicable service(s) | Subject matter | Nature and purpose of processing | Location(s) of processing | Security / privacy information |
|---|---|---|---|---|---|
| Google LLC (Gemini API) | Campaign AI and related generative features when enabled | Prompts and context derived from customer materials submitted for AI-assisted campaign planning, copy, and content generation | Large language model inference to generate campaign outputs requested by the customer | United States and other regions where Google AI services operate | Privacy; Gemini API Terms |
| OpenAI, LLC | Campaign AI (fallback), ad copy generation, email content assistance, and internal analytics summaries | Prompts and context derived from customer materials submitted for AI-assisted features | Large language model inference to generate outputs requested by the customer or authorized users | United States | Privacy; Security |
| Google LLC (Tag Manager / Google Analytics) | Marketing site and app usage analytics (with consent where required) | Device and usage data (such as page views, events, IP-derived location, cookie identifiers) | Web analytics and conversion measurement for the Services and marketing properties | United States and other regions where Google operates | Privacy |
| Google LLC (Analytics Data API — service account) | Internal admin dashboard reporting | Aggregated web analytics metrics (sessions, landing pages, hostname breakdown) for allowed hostnames | Reporting on product usage trends for Artless operations | United States and other regions where Google operates | Privacy |
| Heap Inc. (Contentsquare) | Product analytics and internal admin dashboard aggregates | Usage events, session metadata, and de-identified behavioral analytics about use of the Services | Product analytics, funnel analysis, and operational reporting | United States; European data center when HEAP_EU_DATACENTER is enabled |
Privacy; Contentsquare Privacy |
Questions about this sub-processor list may be sent to support@getshouting.com.
See also: Privacy Notice · Terms of Service
August 23, 2026