Neeto LLC is a data processor and engages certain onward subprocessors that may process personal data submitted to Neeto's services by the Controller. These subprocessors are listed below, with a description of the service and the location where data is hosted. This list may be updated from time to time in accordance with the terms of the Data Processing Agreement.
Neeto will update this page when it adds, replaces, or removes a subprocessor that may process Customer Personal Data. See Updates to this page for how to be notified of changes and how to object to a new subprocessor.
AI subprocessors #
Some Neeto features use AI models from Google (Gemini) and OpenAI. These providers receive data only when you use an AI feature. For example, data is sent when you chat with the Neeti assistant, ask for a transcription, or ask for a summary. Only the content needed for that request is sent.
The only exception is our automated spam screening. To keep spammers off our platform, Google Gemini checks email content whenever it changes. It also checks public-facing pages such as public scheduling pages. If you prefer not to have your content screened by AI, please contact our support team before using the service. We can verify your account and, if approved, opt you out of automated AI spam screening.
Neeto does not use Customer Data to train AI models. Our AI providers are not allowed to use Customer Data to train their models either. Requests are processed individually and are not retained by the provider beyond a short abuse-monitoring window. For a feature-by-feature breakdown of exactly what is sent, to whom, and for how long it is retained, see How Neeto uses AI.
Subprocessor list #
The table below lists all of Neeto's subprocessors and their activities, including the AI subprocessors described above.
| Subprocessor | Activities | Data | Location(s) | When used |
|---|---|---|---|---|
| Amazon CloudFront | CDN provider | Personal info and business data | USA | Always (core infrastructure) |
| Amazon Web Services | Cloud service provider | Personal info and business data | USA | Always (core infrastructure) |
| Apple | Login using Apple | Email, Name | USA | Only if Customer uses social login |
| Bugsnag | Error monitoring | Personal info and business data | USA | Always (core infrastructure) |
| Cloudflare | Proxy for rate limiting and security | Personal info and business data | USA | Always (core infrastructure) |
| Elasticsearch | Search service provider | KB data for search | USA | Always (core infrastructure) |
| Facebook Pixel | Analytics, Marketing | Personal info and business data | USA | Only for marketing site visitors |
| GitHub | Login using GitHub | Email, Name | USA | Only if Customer uses social login |
| Gmail | Email integration | Name, email and the body of the email | USA | Only if Customer enables integration |
| Google Analytics | Analytics, Marketing | Personal info and business data | USA | Only for marketing site visitors |
| Login using Google | Email, Name, Location, Language | USA | Only if Customer uses social login | |
| Google Calendar | Calendar integration | Business data | USA | Only if Customer enables integration |
| Google Drive | Exporting data | Business data | USA | Only if Customer enables integration |
| Honeybadger | Error monitoring | Business data | USA | Always (core infrastructure) |
| iCloud Calendar | Calendar integration | Business data | USA | Only if Customer enables integration |
| Imagekit | Business process | Business data mostly from attachments | USA | Always (core infrastructure) |
| Intercom | Communication | Email, Name | USA | Always (core infrastructure) |
| Lemonfox | Speech to text | Audio recordings submitted for transcription (deleted by provider immediately after processing) | USA | Only if Customer uses transcription features |
| Lemonsqueezy | Subscription management | Email and business data | USA | Always (core infrastructure) |
| Microsoft 365 | Business process | Personal info and business data | USA | Only if Customer enables integration |
| Microsoft Outlook | Email integration | Name, email and the body of the email | USA | Only if Customer enables integration |
| Microsoft Teams | Communication | Personal info and business data | USA | Only if Customer enables integration |
| Mixpanel | Analytics, Marketing | Personal info and business data | USA | Only for marketing site visitors |
| Mailchimp | Business process | Personal info and business data | USA | Only if Customer enables integration |
| Mailgun | Receiving email | Name, email and the body of the email | USA | Always (core infrastructure) |
| PagerDuty | Uptime monitoring | Uptime status | USA | Always (core infrastructure) |
| Razorpay | Payment processing | Personal info and payment data | India | Only if Customer enables integration |
| Sparkpost | Delivering email | Name, email and the body of the email | USA | Always (core infrastructure) |
| Slack | Communication | Personal info and business data | USA | Only if Customer enables integration |
| Stripe | Payment processing | Personal info and payment data | USA | Always (core infrastructure) |
| Telnyx | Communication | Phone number, business data | USA | Only if Customer enables integration |
| Twilio | OTP & 2FA | Phone number | USA | Only if Customer enables integration |
| Unsplash | Image provider | Business data | Canada | Always (core infrastructure) |
| Zapier | Business process | Personal info and business data | USA | Only if Customer enables integration |
| SSL.com | Code signing application | Email and business info | USA | Always (core infrastructure) |
| Docuseal | e-signature application | Email and business info | USA | Only if Customer enables integration |
| Google Gemini | AI assistant & AI features | Content submitted to AI features (e.g., messages to the Neeti assistant) | USA | Only if Customer uses an AI feature |
| Google Gemini | Spam & abuse detection | Email content when it is created or changed; content of public-facing pages | USA | Automated (opt-out via support after verification) |
| OpenAI | Speech recognition, summaries & AI assistance | Audio and text submitted to AI features | USA | Only if Customer uses an AI feature |
Updates to this page #
Our subprocessors change from time to time. We may remove a subprocessor to consolidate the vendors we rely on, or add one when we believe it will improve the Services.
We update this page whenever we add, replace, or remove a subprocessor, and we record each change in the change log below. If you would like to receive an email when this list changes, you can subscribe to subprocessor updates.
Under the terms of our Data Processing Agreement, a Customer may object in writing to a new subprocessor on reasonable data protection grounds by writing to legal@neeto.com within 30 days of the date shown for that change in the change log below. If a Customer does not object within that period, the new subprocessor is deemed accepted.
Change log #
Each entry records the date this page was updated. Wording, formatting, and typo fixes that did not change which subprocessors are used are not listed.
- September 24, 2026: Added Amazon CloudFront as CDN provider. Changed Cloudflare's role from CDN provider to proxy for rate limiting and security. Added the "Updates to this page" section with an email subscription for change notices. The 30-day objection window now runs from the date of the change log entry.
- July 21, 2026: Removed Judge0 and Instagram. Split Google Gemini into two entries (AI assistant and AI features; spam and abuse detection). Changed Mailgun's role from delivering email to receiving email. Lemonfox and OpenAI are now used only when a Customer uses transcription or AI features.
- June 4, 2026: Added Google Gemini.
- February 9, 2026: Added Gmail, Google Calendar, iCloud Calendar, Microsoft 365, Microsoft Outlook, Microsoft Teams, and Telnyx. Removed Cronitor, Msg91, NeetoDeploy, and New Relic. Added the "When used" column.
- July 16, 2025: Added Docuseal. Removed WhatsApp. Corrected Razorpay's location from USA to India.
- December 4, 2024: Added Cronitor, Intercom, Mailchimp, and PagerDuty.
- October 4, 2024: Added SSL.com.
- September 18, 2024: Replaced Heroku with NeetoDeploy as hosting provider.
- August 3, 2024: Added Judge0. Corrected Razorpay's role to payment processing.
- July 19, 2024: Added Facebook Pixel, Google Drive, Lemonfox, Lemonsqueezy, Mixpanel, Razorpay, Unsplash, and WhatsApp. Removed Cloudinary, Grammarly, and Twitter.
- July 18, 2024: Removed Microsoft Clarity and PostHog.
- March 19, 2024: Added OpenAI.
- December 18, 2023: Added PostHog.
- August 10, 2023: Added Microsoft Clarity.
- April 28, 2023: Added Cloudinary and Imagekit.
- April 23, 2023: Added Zapier.
- March 7, 2023: Removed Gurock and Userlist.
- February 20, 2022: Added Cloudflare, Heroku, Instagram, Slack, and Sparkpost.
- December 26, 2021: Added Apple, GitHub, and Twitter as login providers.
- December 10, 2021: Page published.