Sub-processors

Last updated: December 16, 2025

Introduction

In accordance with Article 28 of the General Data Protection Regulation (GDPR), this page lists the third-party sub-processors that IncrediChat (a product of MenuWays Ltd.) engages to process personal data on behalf of our customers.

We carefully select sub-processors that maintain high standards of data protection and security. Each sub-processor is bound by contractual obligations to protect your data in accordance with applicable data protection laws.

For Customers: By using IncrediChat services, you authorize us to engage the sub-processors listed below. If you have concerns about a specific sub-processor, please contact us.

Current Sub-processors

The following sub-processors are currently engaged by IncrediChat:

Sub-processor Purpose Data Processed Location
OpenAI AI language model processing for chat responses Chat messages, conversation context United States
Deepgram Speech-to-text transcription for voice chat Voice recordings (temporary) United States
ElevenLabs Text-to-speech synthesis for voice responses Text content for voice synthesis United States
Paddle Payment processing and subscription management Billing information, payment details United Kingdom / United States
Microsoft Azure Cloud infrastructure and hosting All service data (encrypted) European Union / United States
SendGrid (Twilio) Transactional email delivery Email addresses, email content United States
Google Analytics Website analytics (with user consent) Usage data, anonymized IP addresses United States
Data Transfer Safeguards

For sub-processors located outside the European Economic Area (EEA), we ensure appropriate safeguards are in place:

  • Standard Contractual Clauses (SCCs): We have executed EU-approved SCCs with relevant sub-processors
  • Data Processing Agreements: All sub-processors are bound by DPAs that meet GDPR requirements
  • Security Certifications: We prioritize sub-processors with SOC 2, ISO 27001, or equivalent certifications

Updates & Notifications

We may update this list when we engage new sub-processors or discontinue existing ones. Material changes will be:

  • Posted on this page with an updated "Last updated" date
  • Communicated to customers via email for significant changes
  • Subject to a 30-day notice period before new sub-processors begin processing data (where practical)

Customers who object to a new sub-processor may terminate their subscription in accordance with our Terms of Service.

Contact Us

If you have questions about our sub-processors or data processing practices: