Third-party providers

Last reviewed: November 1, 2026

To operate Hey Sababa, we use external providers. This page lists who they are, what each does and what information they receive. We send each provider only the information it needs to perform its role.

Active today (website and waitlist)

  • Lovable (Sweden): website building and hosting. Receives: requests to the website, as with any website.
  • Cloudflare (USA): domain management, protection against attacks and website acceleration. Receives: IP addresses and technical browsing data, for security only.
  • Supabase (USA, data stored on servers in Frankfurt, Germany): waitlist database. Receives: your email address and the answers you provided.

Analytics and marketing (only with your consent)

  • Google Analytics by Google LLC (USA): measures how the site is used. Loads only after you accept analytics. Receives: technical browsing data, IP address and a cookie ID. Does not receive your email or name.
  • Meta Pixel by Meta Platforms Ireland Ltd. (Ireland, with transfer to Meta Platforms, Inc., USA): measures ads. Loads only after you accept marketing. Receives: technical browsing data, IP address, a cookie ID and a general sign-up event. Does not receive your email or name.

In the service, for people granted access

  • Anthropic (USA): the AI model that understands your messages and drafts replies. Receives: the content of your messages to the bot, only to provide a reply. Under its terms, your messages are not used to train its models.
  • Telegram: the chat channel. Messages pass through Telegram and are also subject to its privacy policy.
  • Google (USA): only if you connect your calendar, and only with permissions you approve. Use of Google data complies with the Google API Services User Data Policy, including the Limited Use requirements.

Planned (we will update this page before using them)

  • WhatsApp (Meta): an additional chat channel.
  • A payment provider acting as Merchant of Record: will collect payment, issue invoices and handle taxes. Your card details will go only to that provider, not to us.
  • An email delivery provider.

Transfers outside your country

  • Some providers operate outside the European Union and Israel. Transfers use a Data Processing Agreement (DPA) and EU Standard Contractual Clauses (SCC), or an equivalent mechanism permitted by law.

Changes to the list

  • Before adding a provider that will receive personal data, we will update this page. We will also notify you by email of a material change.
Back home