Sub-processors

The third parties below process personal data on behalf of Searchpilot B.V. (trading as RankBird) in the context of the Service. We inform Clients in advance of any change. Last updated: May 2026.

Website sub-processors

These third parties are involved in serving rankbird.com itself. Web fonts are self-hosted on rankbird.com — loading a page makes no font request to a third party.

Provider	Purpose	Processing location	Transfer safeguard
Shopify International Ltd / Shopify Inc.	Hosting and serving the storefront (Hydrogen / Oxygen runtime); App Store distribution; Shopify Billing for the App plan.	Ireland, US	EU-US Data Privacy Framework + SCCs
Cloudflare, Inc.	CDN and DDoS protection for rankbird.com; Cloudflare Turnstile (privacy-friendly anti-spam on the contact form).	Global edge network, US	EU-US Data Privacy Framework + SCCs

Product sub-processors

These third parties process Client Data when the Service is in use.

Provider	Purpose	Processing location	Transfer safeguard
Shopify International Ltd / Shopify Inc.	Storefront & Admin APIs — reading store data (products, collections, sales channels) and publishing content under the Client’s OAuth authorization.	Ireland, US	EU-US Data Privacy Framework + SCCs
Anthropic, PBC	Generating content drafts (AI Output) based on the Client’s prompts and context using Claude large language models.	US	Standard Contractual Clauses (Anthropic DPA)
Google LLC / Google Ireland Ltd (Search Console API)	Read-only access to the Client’s Google Search Console performance data, on the Client’s explicit authorization.	EU, US	EU-US Data Privacy Framework
Amazon Web Services EMEA SARL	Application hosting, PostgreSQL database and object storage (S3) for media — storing Client configuration, prompts, generated drafts and performance snapshots.	Frankfurt, Germany (eu-central-1)	Processed within the EEA — no transfer to third countries
Amazon Web Services (Simple Email Service)	Transactional email (account, billing and performance-digest messages) sent via SMTP.	Frankfurt, Germany (eu-central-1)	Processed within the EEA — no transfer to third countries
DataForSEO	Keyword research data (search volume, competition, difficulty, SERP features) for the keywords the Client selects. Receives no personal data of the Client’s website visitors.	EU / US	Standard Contractual Clauses where personal data is involved

Changes

Searchpilot B.V. (RankBird) informs Clients at least 30 days in advance of adding or replacing a sub-processor, by email or in-product notification. Clients may object on reasonable grounds within that period — see Article 6 of our Data Processing Agreement.