Sub-processors
Sub-processors
The third parties listed below process personal data on behalf of Searchpilot B.V. (trading as RankBird) as part of the Service. We notify Customers in advance of any change. Last updated: May 2026.
Website sub-processors
These third parties are involved in serving rankbird.com itself. Web fonts are self-hosted on rankbird.com — no third-party font request is made on page load.
| Provider | Purpose | Location of processing | Transfer safeguard |
|---|---|---|---|
| Shopify International Ltd / Shopify Inc. | Hosting and serving the storefront (Hydrogen / Oxygen runtime); App Store distribution; Shopify Billing for the App Plan. | Ireland, USA | EU-US Data Privacy Framework + SCCs |
| Cloudflare, Inc. | CDN and DDoS protection for rankbird.com; Cloudflare Turnstile (privacy-friendly anti-spam on the contact form). | Global edge network, USA | EU-US Data Privacy Framework + SCCs |
Product sub-processors
These third parties process Customer Data when the Service is in use.
| Provider | Purpose | Location of processing | Transfer safeguard |
|---|---|---|---|
| Shopify International Ltd / Shopify Inc. | Storefront & Admin APIs — reading store data (products, collections, sales channels) and publishing content under the Customer's OAuth authorisation. | Ireland, USA | EU-US Data Privacy Framework + SCCs |
| Anthropic, PBC | Generating content drafts (AI Output) from the Customer's prompts and context using Claude large language models. | USA | Standard Contractual Clauses (Anthropic DPA) |
| Google LLC / Google Ireland Ltd (Search Console API) | Read-only access to the Customer's Google Search Console performance data, on the Customer's explicit authorisation. | EU, USA | EU-US Data Privacy Framework |
| Amazon Web Services EMEA SARL | Application hosting, PostgreSQL database, and object storage (S3) for media — storing Customer configuration, prompts, generated drafts and performance snapshots. | Frankfurt, Germany (eu-central-1) | Processed within the EEA — no third-country transfer |
| Amazon Web Services (Simple Email Service) | Transactional email (account, billing and performance-digest messages) sent via SMTP. | Frankfurt, Germany (eu-central-1) | Processed within the EEA — no third-country transfer |
| DataForSEO | Keyword research data (search volume, competition, difficulty, SERP features) for the keywords the Customer selects. Does not receive personal data of the Customer's store visitors. | EU / USA | Standard Contractual Clauses where personal data is involved |
Updates
Searchpilot B.V. (RankBird) gives Customers at least 30 days advance notice of any addition or replacement of a sub-processor by email or in-product notice. Customers may object on reasonable grounds within that period — see clause 6 of our DPA.