ClientsFlow.io — Sub‑Processors

Effective Date: September 9, 2025
Last Updated: September 9, 2025

This page lists the third‑party companies (Sub‑Processors) that Yuriy Rybak, d/b/a “ClientsFlow.io” engages to help deliver the Service. Terms used but not defined here have the meanings in our Data Processing Addendum (DPA).

  • Purpose of this list. Transparency about who assists us in Processing Personal Data on your behalf.

  • Authorization & objections. As set out in the DPA, you authorize our use of these Sub‑Processors. You may object to changes on reasonable grounds within 14 days of notice. If unresolved, you may terminate the affected Service and receive a pro‑rated refund for prepaid, unused fees for the terminated portion.

  • How we notify you of changes. We will update this page and, where material, provide in‑app and/or email notice to account owners.

Current Sub‑Processors

Regions. Processing generally occurs in Canada and the United States, with cross‑border transfers protected by the EU Standard Contractual Clauses (SCCs) and/or other lawful mechanisms, as described in the DPA.

Sub‑Processor Role / Purpose Typical Data Categories Primary Processing Locations Transfer Mechanism More Info / DPA Stripe, Inc. Payment processing; billing; fraud prevention Customer name, business details, email, billing address, tokenized payment method, transaction metadata (no raw card numbers stored by ClientsFlow.io) USA (global infrastructure) SCCs / other mechanisms as applicable https://stripe.com/privacy • https://stripe.com/legal/data-protection LeadConnector / LC Phone (via Twilio) Telephony, SMS/MMS, call routing/recording (if enabled), deliverability & compliance Contact phone numbers, message/call metadata, message/call content and recordings (if enabled), opt‑in/opt‑out status USA (carrier interconnection may be global) SCCs / carrier contractual safeguards https://www.gohighlevel.com/privacy • https://www.twilio.com/legal/data-protection-addendum Mailgun Technologies, Inc. Email delivery & verification Email addresses, email headers, content (when you send), delivery/engagement logs, verification results USA/EU (Mailgun regions) SCCs / regionalization options https://www.mailgun.com/legal/privacy-policy/ • https://www.mailgun.com/legal/dpa/ HighLevel, LLC (GoHighLevel) Core application hosting and operations for ClientsFlow.io white‑label platform Customer account/profile data, Customer Content stored/processed in the app, logs, support metadata USA/Canada (with cloud providers engaged by HighLevel) SCCs / other mechanisms as applicable https://www.gohighlevel.com/privacy • HighLevel DPA available via their site

Notes: (1) Telephony/SMS requires transmission through carrier networks and international hubs; such routing is inherent to message delivery and governed by telecom regulations and carrier terms. (2) Customers are responsible for obtaining and recording required consents and for honoring opt‑outs under CASL, CAN‑SPAM, TCPA, A2P 10DLC, and similar rules.

No Current Analytics/Support Sub‑Processors

We do not currently use separate analytics or customer support platforms (e.g., Intercom, Zendesk, Hotjar) that Process Personal Data. If this changes, we will update this page and notify you as described above.

Deprecated / Former Sub‑Processors

None at this time.

Be Notified of Updates

To receive change notifications:

  • Ensure your account email can receive messages from [email protected] (and that you have opted into administrative notices), or

  • Email [email protected] with subject “Subscribe — Sub‑Processors Updates” and include your account ID.

Questions

If you have questions about this list or wish to object to a change, contact [email protected] from your registered account email.

ClientsFlow.io © All Rights Reserved.