Subprocessors
Last updated: September 28, 2026
DriveReachAds LLC uses the third-party subprocessors below to provide the Services. They may process Customer Personal Data on our behalf, under written contracts, as described in our Data Processing Addendum. Capitalized terms have the meanings given in that addendum.
Live chat conversations are stored in a self-hosted instance of the open-source Chatwoot platform that DriveReachAds operates on the infrastructure listed below; it is not a separate subprocessor.
Subprocessors of Customer Personal Data
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Vercel | Hosting of the DriveReachAds dashboard and APIs, scheduled jobs, media processing, and file storage (Vercel Blob) for photos, videos, and lead-form attachments. | All categories of Customer Personal Data handled by the dashboard; uploaded files. | United States |
| Supabase | Managed PostgreSQL database for the Services. | All categories of Customer Personal Data stored by the Services (Financing Application Data is stored encrypted). | United States |
| Amazon Web Services | Hosting of dealer websites and lead forms; Amazon Bedrock AI models that power the AI sales assistant, lead-detail extraction, and website content. | Website visitor data, form submissions (financing fields are encrypted before storage), chat and assistant conversations, server logs. | United States |
| Google Cloud | AI image, video, text, and voice generation (Vertex AI and Gemini API); video rendering; Google Maps Platform maps, address lookup, and business reviews. | Inventory photos, business content, and prompts; IP address and device data when a map loads on a website. | United States and other regions (global AI endpoints) |
| OpenAI | AI text and image generation, such as ad copy and website content. | Inventory and business content, prompts, and any personal information included in them. | United States |
| Anthropic | AI text generation, such as campaign building and marketing content. | Inventory and business content, prompts, and any personal information included in them. | United States |
| xAI | AI text and image generation for website content, where enabled. | Business and inventory content and prompts. | United States |
| UseAPI.net | Access to Kling AI video generation models. | Inventory photos and prompts. | May be outside the United States |
| Mailgun | Email delivery and receipt: lead notifications, ADF/XML lead delivery to your CRM, AI assistant emails and replies, and account emails. | Contact details and message contents of leads and conversations. | United States |
| Sentry | Error monitoring for the dashboard and dealer websites (configured not to collect default personal data). | Technical error data, which may incidentally include personal information. | United States |
| hCaptcha | Bot and spam protection on dealer website forms. | IP address, device, and interaction signals of form users. | United States |
| Cloudflare (Turnstile) | Bot and spam protection on sign-up forms and, where configured, dealer website forms. | IP address, device, and interaction signals of form users. | Global network |
Service Providers for Account Data
These providers process only information about your DriveReachAds account, users, and billing, which we handle as a controller under our Privacy Policy.
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Stripe | Subscription billing and payments for your DriveReachAds account. | Your billing contacts and payment details. No Consumer data. | United States |
| Mixpanel | Product analytics for the DriveReachAds dashboard. | Your users’ account identifiers and usage events. No Consumer data. | United States |
Platforms You Connect
When you connect a platform, we send it data only as you direct. These platforms are chosen by you and act under your own agreements with them, so they are not our subprocessors. For example:
- Meta: Facebook and Instagram pages and ads, Messenger, WhatsApp, Lead Ads, catalogs, and the Meta Pixel and Conversions API.
- Google: Google Ads, Merchant Center, Business Profile, and YouTube.
- TikTok: TikTok ads, catalogs, posting, lead forms, and events.
- Your CRM and lead tools: CRMs or lead-management systems you send ADF/XML leads to, and shopper or finance tools you embed.
- Marketplace and classified sites: Sites such as Facebook Marketplace and Craigslist, posted to by the AutoPilot desktop app on your computer.
Dealer websites do not load advertising pixels or send server-side conversion events for visitors who opt out, including through Global Privacy Control, or who have not consented where your consent settings require it.
Changes to This List
We update this page when we add or replace a subprocessor. We also email account owners at least 30 days before a new subprocessor begins processing Customer Personal Data, except where a replacement is urgently needed to keep the Services secure or available, in which case we give notice as soon as reasonably practicable.
You may object to a new subprocessor as described in Section 9 of the Data Processing Addendum. Questions? Email hello@drivereachads.com.