Legal
Sub-processors
BASE 1 MEDIA LIMITED, trading as BaseOne, uses the companies below to provide Opptix. Each one is bound by a written contract with data protection duties, and may only use personal data to provide its service to us. This list applies to our data processing addendum and our privacy notice.
Current sub-processors
| Company | What they do for us | Personal data involved | Location |
|---|---|---|---|
| Railway Corporation | Hosting for the Opptix app and its database | All data in the app | EU (Netherlands). US company |
| Cloudflare, Inc. | Website hosting and security, bot checks on forms and sign-up, storage of encrypted backups | Website form messages, IP addresses, encrypted backups | Global network. US company |
| Stripe Payments Europe Ltd and Stripe, Inc. | Card payments, subscriptions, invoices and sales tax | Billing name, address, email, tax number, payment details | Ireland and USA |
| Anthropic, PBC | AI that checks fit, reads documents, drafts messages and powers the Aria chat | The content needed for each task, which can include names, roles and message text | USA |
| OpenAI, L.L.C. | Voice conversations with Aria and the voice sales manager | Voice audio and transcripts of those sessions | USA |
| Resend (Plus Five Five, Inc.) | Service emails from Opptix, such as sign-in links, receipts and notices, and delivery of website form messages to us | Name, email address, message content | USA |
| Google LLC | Sign in with Google (if you choose it), local business search and website speed checks | Sign-in identity; business names, addresses and website addresses | USA |
| Microsoft Corporation | Sign in with Microsoft (if you choose it) and our own email for support and website messages | Sign-in identity; name, email address, message content | EU and USA |
| Unipile SAS | Connecting a professional social network account you link, to send and read messages from it | Profile details and messages of the people you write to there | France |
| Exa Labs, Inc. | Web search for news and public information about organisations | Search terms, which can include organisation and people's names | USA |
| A web search results provider | Search results for public information about organisations and jobs | Search terms, which can include organisation and people's names | USA |
Where data leaves the UK or EEA, we rely on an adequacy decision (including the UK Extension to the EU-US Data Privacy Framework), the UK International Data Transfer Agreement or Addendum, or the EU Standard Contractual Clauses. Ask us if you would like more detail about any provider.
Services you connect
Some services are connected by you, with your own account and under your own agreement with that provider. They act for you, not for us, so they are not our sub-processors. They include:
- your mailboxes, connected by Microsoft 365 or by mail server settings;
- Microsoft 365 services such as SharePoint and Microsoft Teams;
- your own contact data account, used by the contact finder;
- your own email warm-up account;
- your own AI tools, connected to Opptix with a key you create;
- tools you send leads to with webhooks.
Changes to this list
We will update this page at least 30 days before a new sub-processor starts handling customer personal data, and tell account owners by email or in the app. You can object as set out in the data processing addendum. Questions? Email [email protected].