Widgo, Inc.

Effective date: 25 August 2026 · Last updated: 25 August 2026

Widgo uses a small number of vendors to deliver the Service. Each one is engaged under a written contract with confidentiality and data protection terms no less protective than our own Data Processing Agreement, and each is reviewed before engagement.

This page is incorporated into the DPA. We give 30 days' notice before adding or replacing a subprocessor. To receive those notices by email, write to support@widgo.ai with the subject "subprocessor notices" and we will add your address to the list.

Infrastructure and platform

• Cloudflare, Inc.. What it does for Widgo: Edge network, CDN, web application firewall, DDoS and bot protection, serverless compute, object and key-value storage, AI inference and gateway, human verification Data it may process: All data in transit; conversation content and generated output; IP address; widget assets and cached knowledge base content Location: USA, with global edge processing

Product and account

• Stack Auth. What it does for Widgo: Sign-up, sign-in, federated identity, organisations and teams, email and domain verification Data it may process: Customer name, email address, authentication metadata, session data Location: USA

• Stripe, Inc.. What it does for Widgo: Subscription billing, invoicing, customer portal, payment processing Data it may process: Customer name, email, billing address, tax ID, subscription and invoice data. Card data goes directly to Stripe and is never held by Widgo Location: USA, with EU processing for EU customers

Communication and support

• Customer.io. What it does for Widgo: Lifecycle, transactional and marketing email to Widgo customers Data it may process: Customer name, email address, workspace and product event attributes, email engagement Location: USA (EU region available)

• Intercom, Inc.. What it does for Widgo: Help centre and in-app support messaging Data it may process: Customer name, email address, support conversation content, product context Location: USA and EU

Analytics, monitoring and marketing site

• PostHog, Inc.. What it does for Widgo: Product analytics inside the Widgo dashboard Data it may process: Customer usage events, device and browser data, IP address Location: USA (EU cloud available)

• Datadog, Inc.. What it does for Widgo: Application performance monitoring, logging, error tracking, uptime Data it may process: Application and infrastructure logs, error traces, IP address, request metadata Location: USA

• Google LLC (Google Analytics, Google Tag Manager). What it does for Widgo: Marketing website analytics on widgo.ai Data it may process: Website visitor IP address (truncated where configured), device and browser data, campaign parameters, page views Location: USA and global

• Framer B.V.. What it does for Widgo: Hosting of the widgo.ai marketing site Data it may process: Marketing site visitor request data, form submissions made on the marketing site Location: Netherlands and USA

Data sources

• Licensed IP intelligence providers. What it does for Widgo: Supply the reference data that lets Widgo match an IP address to an organisation at company level Data involved: The IP address is checked against licensed reference data. No conversation content is sent. No person-level identification is performed Location: To be confirmed before publication

Widgo personnel and contractors

Widgo staff and contractors may access Customer Personal Data on a least-privilege, need-to-know basis to operate and support the Service. Personnel are located in the United States, Canada and Türkiye, and are bound by written confidentiality and intellectual property agreements. Transfers to personnel outside the EEA and UK are covered by the Standard Contractual Clauses and the UK Addendum as described in the DPA.

Customer-controlled integrations are not subprocessors

When you connect a CRM, calendar, chat tool or other product to your workspace, you instruct us to send data to it. That vendor is your vendor, not our subprocessor, and its own terms and privacy policy govern what happens to the data once it arrives. Examples include HubSpot, Salesforce, Pipedrive, Slack, Microsoft Teams, Google Calendar and Microsoft Outlook.

Questions or objections: support@widgo.ai