Draft. Draft prepared from legal research, not yet reviewed by a licensed US attorney. Items in ⟦ ⟧ must be completed. Before this becomes final: confirm governing law and venue, complete the entity, address and contacts, and set up how a former customer asks for deletion (the Terms, DPA and Privacy Notice promise deletion within 30 days of such a request).
Haularo Subprocessors
These are the third parties that process customer data to help us run Haularo. We give at least 30 days’ notice of a new subprocessor, as described in the Data Processing Addendum.
| Subprocessor | Purpose | Data | Location |
|---|---|---|---|
| ⟦Hosting provider⟧ | Servers, database and file storage | All customer data | United States |
| ⟦Email provider⟧ | Sending invitations, password resets and notifications | Names and email addresses | United States |
| ⟦AI model provider⟧ — only when a company turns on the AI Copilot | Answering Copilot questions | The question and the records needed to answer it; not used for model training | United States |
Map tiles, state boundaries and distance data are bundled with Haularo and do not send customer data to third parties.