Subprocessors
The third-party providers that help us deliver Morasel, what each one does, and how we tell you when the list changes.
Last updated: July 28, 2026
To provide Morasel, we rely on a limited set of third-party providers (“subprocessors”) that may process personal data on our behalf. This page lists the subprocessors we use or expect to use, the purpose of each, and forms part of our Data Processing Addendum (/data-processing).
Not every subprocessor applies to every customer. Several are engaged only when you enable the corresponding feature or integration — for example, AI-assisted features, mobile push notifications, or the Shopify integration. The “Applies” column below states whether each provider is always active or conditional. We do not claim that Meta, Postmark, OpenAI, Apple, Google, or Shopify processes every customer’s data.
We impose data-protection obligations on every subprocessor consistent with our DPA. All entries on this page are current as of the “Last updated” date above.
1. Confirmed and expected subprocessors
The following named providers process personal data as described. Where a provider is conditional, it processes data only when the related Morasel feature or integration is enabled by you.
| Subprocessor | Purpose | Location / region | Data processed | Applies | Privacy / data terms |
|---|---|---|---|---|---|
| Meta Platforms, Inc. | WhatsApp Business Platform and related messaging services | United States; global Meta infrastructure | Message content and metadata, recipient phone numbers, delivery and read status | Always active (core messaging channel) | https://www.whatsapp.com/legal/business-data-processing-terms |
| ActiveCampaign, LLC (Postmark) | Transactional email delivery (sign-in, notifications, billing emails) | United States | Recipient email addresses and email content | Active when email notifications are enabled | https://postmarkapp.com/privacy-policy |
| OpenAI, L.L.C. | Optional AI-assisted functionality (e.g. suggested replies, summaries) | United States | Content submitted to AI features when used | Optional — only where AI features are enabled | https://openai.com/policies/privacy-policy |
| Apple Inc. | Apple Push Notification service (APNs) for iOS notifications | United States; global Apple infrastructure | Device push tokens and notification payloads | Active when mobile push on iOS is used | https://www.apple.com/legal/privacy/ |
| Google LLC | Firebase Cloud Messaging and Android push notifications | United States; global Google infrastructure | Device push tokens and notification payloads | Active when mobile push on Android is used | https://firebase.google.com/support/privacy |
| Shopify Inc. | Shopify integration for connected stores | Canada; United States | Store, order, and customer data from the connected store | Optional — only where the customer enables the Shopify integration | https://www.shopify.com/legal/privacy |
“Applies” indicates whether a subprocessor is always engaged or only when you turn on the related feature or integration. Conditional subprocessors process no personal data until that feature or integration is enabled.
2. Infrastructure categories being finalized
Morasel is currently finalizing portions of its production infrastructure. This page will be updated to name the specific provider in each category below before that service processes production customer data.
The categories still being finalized are: cloud hosting; managed database; object storage; monitoring and error reporting; analytics; customer-support or ticketing; and payment processing. These are categories of service, not vendor names — no provider is confirmed in these categories yet.
We will not allow a provider in any of the above categories to process production customer data before we name it here.
3. Changes to this list
Morasel may update this list as its services evolve. Customers may subscribe to receive notice of material changes to subprocessors by contacting our privacy team.
When we add or replace a subprocessor that processes Customer Personal Data, we will update this page and the “Last updated” date. Where required by your agreement or applicable law, we will provide advance notice of a new subprocessor and give you a reasonable opportunity to raise a good-faith objection before it begins processing your data.
Contact
Questions about our subprocessors, or want to subscribe to change notices or raise an objection? Contact our privacy team.