Legal
Subprocessors
Last updated: July 19, 2026
Obriym CRM engages the third-party service providers below to operate the service. Each of them processes data only to provide its service to Obriym, and under its own data-processing terms.
We do not sell personal data or protected customer data, and we do not share it with advertising brokers.
Platforms you connect yourself — marketplaces, messengers, delivery carriers, payment gateways — are not Obriym subprocessors. They are covered in their own section below.
| Subprocessor | Purpose | Data processed | Region |
|---|---|---|---|
| Neon | Primary application database | All workspace data, including customer personal data | EU |
| Vercel | Application hosting and file storage | Requests, uploaded files (product images, data exports) | Global edge, EU functions |
| Sentry | Error monitoring | Error events, with personal data scrubbed before sending | EU / US |
| Upstash | Rate limiting and reliable webhook or queue delivery | Rate-limit counters, queued job payloads (identifiers, no bulk personal data) | EU |
| Anthropic | AI assistant features | Prompts derived from owner-enabled workspace content; no raw Shopify customer personal data. Non-PII Amazon order/catalog facts may be included when the owner asks AI to work with those records | US |
| Resend | Transactional email delivery | Recipient email address and message content | US / EU |
| Sign-in and, after cookie consent, website analytics | Sign-in identity; analytics data only once you accept the cookie banner | Global |
Integrations you connect
Separately from the subprocessors above, Obriym CRM exchanges data with platforms whose accounts belong to you: marketplaces, messengers, delivery carriers, payment gateways, and e-commerce platforms. These are not Obriym subprocessors. You hold the agreement with each platform directly, it acts as an independent data controller, and it operates under its own privacy policy.
Data only starts moving once you connect the platform in Settings → Integrations, and only along the sync directions you have enabled. Every write direction to a marketplace is off by default and is armed manually by the workspace owner.
| Category | Platforms | Data that moves |
|---|---|---|
| Marketplaces and e-commerce | Prom.ua, Rozetka, OLX, Amazon, eBay, Shopify, WooCommerce | To you: orders, buyer contact details, messages, products. From you: prices, stock levels, order statuses, tracking numbers. |
| Messengers | Instagram, Facebook Messenger, WhatsApp, Telegram, Viber | To you: messages, the sender's name and profile identifier. From you: your replies. |
| Delivery carriers | Nova Poshta, Ukrposhta | From you: recipient name, phone, and address to create a waybill. To you: the tracking number and delivery status. |
| Payment gateways | LiqPay, WayForPay, Monobank, Hutko | To you: the payment status and amount for an order. Card details never pass through Obriym and are never stored. |
| Automation and your own integrations | Zapier / Make, outbound webhooks, the public REST API, MCP | Only the data you explicitly configure to be sent, or request with your own token. |
What happens when you disconnect an integration
- Revoking access immediately erases the cached credentials for that connection, and data exchange stops.
- Deleting the integration additionally erases all of its operational data in Obriym: stored tokens, sync settings, polling cursors, and import state.
- Records that already reached your workspace (orders, leads, products) remain your data and are deleted with the workspace or on your separate request.
- When a platform itself notifies us that a buyer deleted their account — as eBay requires — we erase that person's personal data across every affected workspace.
Notes
- Analytics providers (Google Analytics and Vercel Analytics) load only after you accept the cookie banner. If you decline, no analytics script runs.
- A provider's own certifications belong to that provider and are not presented as Obriym's certifications.
- We announce changes to this list on this page, and we notify affected workspace owners of material changes.
Questions
For questions about this list, a data processing agreement, or a privacy request, contact us at crm@obriym.com.