Sub-processors
The following third-party providers process data on Nxera's behalf in connection with the Services. This list is incorporated into the Privacy Policy and the Data Processing Addendum and is updated when changes occur. It is built from the providers Nxera's systems actually call, including the providers that are called only once a feature is switched on.
Sub-processors that receive client, customer, member, or visitor data
| Sub-processor | Role | Region |
|---|---|---|
| Stripe, Inc. | Billing of Texts on Nxera's own Stripe account; Stripe Connect processing of member payments on the client's own Stripe account, with Nxera's plan payment fee taken from each payment | USA |
| Vercel Inc. | Hosting of getnxera.com, the client portal, and plan pages; custom-domain provisioning; Vercel Web Analytics (cookieless page-view counts) | USA / Global |
| Supabase, Inc. | Database, authentication, file storage (member photos, documents, reports, export files), and serverless functions | USA |
| Resend, Inc. | Delivery of email sent in the client's name and of Nxera's own email; delivery, bounce, and complaint events; open and click events used only for Nxera's own outreach | USA |
| Anthropic, PBC | The AI assistant (Claude API): drafts messages and plan designs, answers the client, sorts and summarizes incoming customer and member messages, checks drafts for review incentives, writes the morning briefing, and asks questions in the free scan. Receives the business's facts, the message context, and the customer names and message text needed for the task; may not train models on that content | USA |
| Google LLC | Google Analytics 4 and Tag Manager on getnxera.com; Places business listings and public reviews; the Business Profile connection a client authorizes (OAuth); PageSpeed and Knowledge Graph lookups; font delivery | USA / Global |
| Cloudflare, Inc. | Turnstile bot check on forms; DNS lookups for domain checks; script library delivery (cdnjs) on scan reports, monthly reports and client websites | USA / Global |
| jsDelivr (Prospect One s.r.o.) | Script CDN on some pages; receives visitor IP addresses when a script loads | Global |
| Functional Software, Inc. (Sentry) | Error reports and sampled performance traces from every getnxera.com page, including plan pages and the client portal, and error reports from the Nxera owner app | USA |
| 650 Industries, Inc. (Expo) | Push notification delivery for the Nxera owner app: receives the device push token and the notification title, text, and in-app link. The text includes a customer's or member's name, or words from their message, only if the owner turns on "Show names on the lock screen" | USA |
| Lob.com, Inc. | Printing and mailing postcards to clients and prospects (name and mailing address). The functions exist, but no schedule runs them today | USA |
Providers used only for the free competitive scan and Nxera's own outreach
These providers receive the business details a scan requester submits, business names, public listing data, public web data, or the email addresses of businesses Nxera contacts. They do not receive a client's customer list or member records.
| Provider | Role | Region |
|---|---|---|
| OpenAI, L.L.C. | AI platform asked trade and market questions for the free competitive scan and for Nxera's own research questions; API data is not used to train models | USA |
| Google LLC (Gemini) | AI platform asked trade and market questions for the free competitive scan and for Nxera's own research questions (paid API; prompts and responses are not used to improve Google products) | USA / Global |
| Apify Technologies s.r.o. | Public creator and listing discovery for Nxera's own outreach | Czech Republic / Global |
| ZeroBounce (Hertza LLC) | Email address validity checks for Nxera's own outreach to businesses | USA |
| ScreenshotOne | Screenshot of a scan requester's public website for the scan report | Global |
| Yelp Inc. | Business listing lookups; receives business names only | USA |
Providers used only when a feature is switched on
Texting, WhatsApp, and PostHog are switched off today. Each provider below receives data only once its feature is switched on.
| Provider | Role | Region |
|---|---|---|
| Twilio Inc. | Used when texting is switched on: text messages in the client's name to customers and members who agreed to texts, and Nxera's own texts to clients who agreed to them; carrier registration of the client's text number (TrustHub) after the client pays for Texts, with the business details the carriers require, including the EIN the owner types on the registration page, which Nxera never stores, or a sole proprietor's mobile number; release of the number and deletion of the carrier campaign when Texts end; delivery receipts and replies (STOP, HELP). Receives phone numbers, message text, and timestamps | USA |
| Telnyx LLC | Used when texting is switched on and Telnyx is the chosen texting provider: text messages, carrier registration of the client's text number (including the EIN the owner types on the registration page, which Nxera never stores), and phone-number orders, as an alternative to Twilio; delivery receipts and replies. Receives phone numbers, message text, and timestamps | USA |
| Meta Platforms, Inc. (WhatsApp Business Platform) | Used when WhatsApp is switched on: WhatsApp messages in the client's name to customers and members who agreed to WhatsApp, and to clients who agreed to them; Meta-approved message templates; delivery receipts and replies. Receives phone numbers, message text, and timestamps | USA / Global |
| PostHog, Inc. | Used when switched on (off today): product analytics on marketing pages, the client portal, and plan and member pages, served through getnxera.com. Session recording on marketing pages with every input masked, and in the portal with all text and attributes masked and images, video, and embedded frames blocked; no recording on plan and member pages. Does not load when the browser sends Global Privacy Control | USA |
Public data sources that receive no personal data (YouTube public channel data, Pexels stock imagery, Google Knowledge Graph entity lookups for the free scan) are not sub-processors and are not listed. Client websites are not served while site building is paused (since October 2026).
For questions about how these sub-processors are used, contact info@getnxera.com.
To object to a new sub-processor as a current Client, see Section 5.4 of the Data Processing Addendum.