Sub-processors
Last updated 2026-10-25
Who else handles data for OpenGMB, for what, and where.
1. Providers
These providers handle data for OpenGMB. Each receives only what it needs. The same list appears in the privacy policy.
| Provider | Country | What for | Data involved |
|---|---|---|---|
| Oracle Cloud Infrastructure | Australia (Melbourne) | Servers and database | All data in OpenGMB |
| Google Drive (Google LLC) | United States | Off-site copy of the database backups | All data in OpenGMB |
| Google APIs (Business Profile, sign-in, notifications) | United States | The source and destination of the profile data you connected | Business Profile data and your Google account email |
| Google Maps Platform, in your browser | United States | The street map on the rank tracking page, when it is switched on for this server | Your browser contacts Google directly, so Google receives your IP address and what the map shows |
| Resend | United States | Sending email | Recipient address and the message |
| Anthropic | United States | AI features: suggested replies, post text, descriptions, review topics and the in-app assistant | The text each request needs, such as review text, star rating, a reviewer's first name and business details |
| Browser push services (Google, Mozilla, Apple, Microsoft), only if you turn on alerts on a device | Set by your browser vendor | Delivering alert messages to that browser | A short title that names the location. Never review text. |
| DataForSEO, only if rank tracking, competitor profiles or AI search visibility checks are used | Estonia | Local search ranking checks, competitor profiles, and checks of how ChatGPT, Gemini, Perplexity and Google AI Overviews answer local searches | Search keyword, map coordinates, business name and Google place id. Competitor profiles return public business data, which can include names in posts. AI search visibility checks send prompts built from the business category, city and keywords. |
| OpenAI, only when you generate an AI image | United States | AI images for posts | The image subject text you type, up to 500 characters, plus our style rules |
| Pixabay | Germany | Stock photos for posts | The search words you type. A photo you pick is downloaded and served from our storage, with credit to its author. |
| Google Places API, called from our servers | United States | Finding a business in the free review-link tool and in place search, relevance-based rank checks, and a location's map position | The text you type to find a business, a tracked keyword with a map point, or the business's Google place id |
| Razorpay | India | Checkout and subscription billing | Order and subscription records. Card data stays with Razorpay. |
| Zapier and other webhook receivers, only if you set up an integration | United States (Zapier); set by the receiver for others | Sending data to your own integrations | The data you choose to send |
13 providers listed.
2. Notice of changes
We give customers 30 days' notice before adding a provider. Write to info@synectus.com to ask a question or raise an objection.
3. Change log
- 2026-10-25: Published this page. Added the country of each provider. DataForSEO: the data column now says competitor profiles can include names in posts.