Subprocessors

These providers may come into contact with every customer's data, because the Service does not run without them.

• [Tárhelyszolgáltató / Hosting provider] — Hosting and infrastructure: runs the application and stores the database, uploaded files and backups. Location of processing: [EU]. Data transferred: everything the Customer stores in the Service.
• [E-mail küldő szolgáltató / SMTP provider] — Email delivery: service messages, campaigns and automation emails on the Customer's behalf. Location of processing: EU. Data transferred: recipient address, subject and body, delivery outcome (bounce, complaint).

Data reaches these providers only if the Customer has set up the integration with its own account. Without that, nothing is transferred.

• Anthropic PBC (548 Market Street, San Francisco, CA, USA) — AI assistant: summaries and draft replies, when the Customer switches it on. Location of processing: USA (transfer under standard contractual clauses). Data transferred: the content of the record a summary or reply is asked for.
• Számlázz.hu (KBOSS.hu Kft., 1031 Budapest, Záhony utca 7.) — Issuing invoices and reporting them to the Hungarian tax authority. Location of processing: Hungary. Data transferred: buyer name, address, tax number, email, invoice lines.
• Billingo (Billingo Technologies Zrt., 1133 Budapest, Árbóc utca 6.) — Issuing invoices and reporting them to the Hungarian tax authority. Location of processing: Hungary. Data transferred: buyer name, address, tax number, email, invoice lines.
• SMS-átjáró / SMS gateway — Delivering text messages through the provider the Customer configures. Location of processing: as chosen by the Customer. Data transferred: recipient phone number and message text.
• WooCommerce, Shopify, ShopRenter, UNAS — Receiving web shop orders; data flows from the shop into MiniCRM, not the other way. Location of processing: as the Customer's shop. Data transferred: the order: buyer name, email, address, lines.
• Webhook-címzettek és bővítmények / Webhook recipients and add-ons — Events sent to URLs the Customer configures; the Customer is responsible for the recipient and the lawfulness of the transfer. Location of processing: wherever the Customer points them. Data transferred: the record the event is about.
• Böngészők push-szolgáltatásai / Browser push services (Google, Mozilla, Apple, Microsoft) — Delivering notifications to a colleague's phone or browser, when they switch it on. Location of processing: as the browser vendor. Data transferred: an end-to-end encrypted notification (RFC 8291) the service cannot read.

MiniCRM uses no third-party analytics, tracking or advertising service, on the public pages or in the application. Email open and click tracking runs on the Provider's own server, solely for the Customer's campaign statistics.

Customers are told by email at least 30 days before a provider is added or replaced, as the Data Processing Agreement requires. The date at the top of this page is when it last changed.