Sub-processors
Who processes data for GoXylo.
The outside companies that store or process data so GoXylo can run.
In short. These are the outside companies that store or process data for GoXylo. Each gets only what it needs for its job. If you use AI features, what you enter goes to OpenAI, which may use it to improve its models.
Sub-processors
| Company | What it does for GoXylo | Data it receives |
|---|---|---|
| Hetzner Online GmbH | Servers and server backups (Ashburn, Virginia, USA) | All workspace data, files, and logs |
| Cloudpepper | Management of the servers that run GoXylo | Administrative access to the servers that hold workspace data |
| Cloudflare, Inc. | DNS, content delivery and edge security, inbound email routing, cookieless Web Analytics, and R2 storage for offsite backups | Web traffic and visitor IP addresses, email sent to goxylo.com addresses, and backup copies of workspace data |
| Stripe, Inc. | Subscription payments, and Stripe Connect for workspaces that take payments | Billing name, email, payment details, and subscription status |
| SMTP2GO | Outgoing email delivery | Recipient addresses and email content |
| OpenAI | AI features: the AI setup assistant, the website builder, Ask Xylo, and XyloChat (Prime) | What you enter in AI features, the context those features attach, and the responses. OpenAI may use this data to improve its models. |
| Serper | Web search when XyloChat searches the web | Search queries |
| Firecrawl | Web page retrieval when XyloChat searches the web | Search queries and the addresses of pages XyloChat opens |
| Sentry | Error tracking for the website builder and the AI setup assistant | Error reports, which can include request details and IP addresses |
| UptimeRobot | Uptime checks of our public pages | No customer data |
Services you connect yourself
Some features use an account you set up with another company. That company works for you, not for GoXylo, and its own terms apply:
- Twilio: SMS messages sent with your own Twilio account.
- Stripe Connect: payments from your customers into your own Stripe account.
- Unsplash and Openverse: stock photo search in the website builder. Only the search terms are sent.
Content your browser loads directly
Some pages load fonts from Google Fonts, so Google receives your browser's IP address when it downloads them.
Changes and questions
We update this page when the list changes. Business customers who need notice of changes, or our Data Processing Addendum, can email [email protected]. Privacy questions go to [email protected]. See also our Privacy Policy and AI disclosure.