Subprocessors
Last updated: Apr 14, 2026
English version controls. This legal document is provided in English. If any translated page, in-product text, support response, or summary conflicts with this English version, this English version controls except where applicable law requires otherwise.
We use service providers and subprocessors to operate, secure, bill, support, monitor, and improve ShortURL.bot. The providers below are key subprocessors or service-provider categories. Specific provider use may vary by feature, customer configuration, geography, and environment.
| Provider or category | Purpose | Typical data involved | Location of processing |
|---|---|---|---|
| Microsoft Azure | Cloud hosting, databases, storage, networking, compute, security, and logging. | Account data, service content, logs, analytics, uploaded assets, and operational data. | Canada Central (primary); East US, West Europe, and other Azure regions depending on customer configuration, redundancy, and disaster-recovery needs. |
| Microsoft Entra External ID / Azure AD B2C | Authentication, identity, account login, and profile flows. | Email, user identifiers, authentication metadata, and login events. | Microsoft-operated North America and Europe data centres, per Microsoft's identity-platform regional architecture. |
| Stripe | Payment processing, checkout, invoices, receipts, subscriptions, taxes, refunds, and chargebacks. | Billing contact data, payment metadata, invoices, subscription status, and transaction records. | United States primary, with regional processing per Stripe's terms and applicable regulatory requirements. |
| Domain registrar, registry, and domain-data providers | Domain search, registration, renewal, transfer, restoration, registry compliance, WHOIS/registration data, and DNS-related provisioning. | Domain names, registrant contact data, domain orders, renewal settings, and registry status. | Varies by top-level domain and upstream provider; see the upstream registrar's and registry's own terms. |
| OpenAI and AI providers | AI-assisted URL extraction, link review support, page drafting, translation assistance, image or QR asset generation, and similar AI features. | Prompts, URLs, page text, images, screenshots, user-selected content, and generated outputs. | United States primary, per the AI provider's API terms. |
| Google Web Risk / Google Safe Browsing and safety providers | Abuse detection, reputation checks, malware/phishing review, and safe-link handling. | URLs, domains, IP-derived signals, safety status, and scan metadata. | Global, per the safety provider's infrastructure. |
| Brevo (formerly Sendinblue) or email providers | Transactional email, account notices, support notifications, security messages, and billing-related communications. | Email addresses, message metadata, and message content. | European Union primary (Brevo operates from France), per the email provider's regional infrastructure. |
| UptimeRobot and monitoring providers | Availability monitoring, uptime checks, incident detection, and operational alerts. | Service status, endpoint availability, technical logs, and alert metadata. | Global check points operated by the monitoring provider. |
| Customer-selected destinations and integrations | Redirects, customer websites, embedded conversion tracking, public pages, and API/MCP workflows configured by customers. | Click IDs, referrer and attribution data, customer-provided event data, and destination URLs. | Determined by the customer; varies by the destination or integration selected. |
Questions about subprocessors can be sent through the Help Center or to admin@shorturl.bot.