Legal
Subprocessors
Last updated: 2026. The third parties that process data on our behalf, and what each one does.
Draft pending legal review. This list reflects the integrations actually present in the product and has not yet been reviewed by a lawyer.
We use a small number of providers to run Karobar. Each one receives only what it needs for its purpose. Connected messaging platforms are not listed here as subprocessors: you connect those yourself, and data flows to them because you asked it to.
| Provider | What it does | What it receives |
|---|---|---|
| Stripe | Subscription payments and invoicing | Billing name, email, and payment details entered on Stripe’s own checkout. Card numbers never reach Karobar. |
| Cloudflare R2 | Storage for media in conversations and catalogs | Images, video, audio and documents you or your customers send, plus product and avatar images. |
| Google Cloud (Vertex AI, Gemini) | AI drafting, summarisation and analysis | The content you submit to an AI feature at the moment you use it. Not used to train their models. |
| DeepSeek | AI drafting and analysis | The content you submit to an AI feature at the moment you use it. Not used to train their models. |
| Google Firebase | Push notifications to the mobile apps | Device push tokens and the notification text shown on your device. |
| Email delivery provider | Transactional email — verification, password reset, billing notices | Your email address and the contents of that message. |
Hosting
The application and database run on our own infrastructure. Changes to this list are published here; material changes are announced to account owners by email.
Questions
Ask us anything about this list at support@karobar.io.