Infrastructure Sub-processors

A list of entities providing cloud infrastructure and dedicated server facilities and used by Klevu (as of May 2018) , is provided below. Klevu owns and controls logical access to the infrastructure maintained by these entities, while these entities maintain the physical security of the servers, network and the data center.

Entity NameEntity TypeCorporation Location
Amazon Web Services, Inc.
see https://aws.amazon.com/blogs/security/all-aws-services-gdpr-ready/
Cloud Service ProviderUnited States
Google LLC
see https://cloud.google.com/security/gdpr/
Cloud Service ProviderUnited States
OVH SAS
see https://www.ovh.co.uk/personal-data-protection/gdpr.xml
Server ProviderFrance
Sigmatic OyServer ProviderHelsinki
Oy Creanova Hosting Solutions LtdServer ProviderHelsinki
DigitalOcean
see https://www.digitalocean.com/security/gdpr/
Server ProviderNew York
RedSwitches.comService ProviderAustralia

Service Specific Sub-processors

Klevu works with certain third-parties to provide a specific functionality within its Services. These third parties are Sub-processors with limited use indicated below and access to Subscriber Data in order to provide the relevant functionality.

Entity NamePurposeCorporation Location
Proinity LLCKeyCDN provides content distribution (CDN), security and DNS services for web traffic to and from the services. The primary information KeyCDN has access to are the search API calls initiated from individual websites, their responses (cached on their servers) and end-user IP addresses. see https://www.keycdn.com/gdprSwitzerland
geoplugin.comgeoplugin.com offers a service that provides geographic information and other data associated with specific Internet protocol addresses. The primary information the geoplugin.com has is the end-user’s IP address without any further detail of the end-user.France
StripeIt is a payment processing gateway. It has access to the Subscriber’s email address. The other information in Stripe (such as credit card number and any other credentials required to make a payment) are collected by the Stripe after accepting the terms of service presented to the customer by Stripe. see https://stripe.com/guides/general-data-protection-regulationUnited States
PaypalIt is a payment processing gateway. It has access to the Subscriber’s email address. The other information in Stripe (such as credit card number and any other credentials required to make a payment) are collected by the Stripe after accepting the terms of service presented to the customer by Stripe. see https://www.paypal.com/stories/uk/getting-gdpr-readyUnited States
HubspotIt is a CRM system used for managing relations with customers. It has access to the Subscriber’s primary contact details such as name, address, contact number and business details. see https://www.hubspot.com/data-privacy/gdprUnited States
FreshdeskCustomer support system, primary used for interacting with customers to deal with technical and non-technical issues. It has access to subscriber’s email address, information on the issues reported by the subscriber and often the server access details. see https://freshdesk.com/gdprUnited States
Finago OyKlevu accounting is run by Procountor application by Finago Oy. It contains our customer invoicing related information. See https://finago.com/fi/meista/ajankohtaista/gdpr/Finland
Talouskonsul-
tointi Mertaoja Oy
Klevu uses Talouskonsultointi Mertaoja Oy to perform certain parts of accounting. The accounting system contains invoicing and contact information about Klevu customers and providers.Finland
Maxmind.comMaxmind provides Geolocation Web Services that Klevu uses to identify the city and region of a shopper. The location information is used only for the reporting purpose to the respective Merchants.The data is processed locally at Klevu’s end and never shared with Maxmind or any 3rd party.
see https://support.maxmind.com/maxmind-gdpr-faqs/
United States
Hotjar.comWe use Hotjar in order to better understand our users’ needs and to optimize this service and experience. This usage only applies to the Klevu Merchant Center admin portal, we do not use Hotjar on our customers’ websites. Hotjar is a technology service that helps us better understand our users’ experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behavior and their devices. This includes a device’s IP address (processed during your session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our website. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually forbidden to sell any of the data collected on our behalf.
see https://www.hotjar.com/legal/compliance/gdpr-commitment/
Malta

Klevu Oy Sub-processors

The following entities are the current members / subsidiaries of the Klevu Oy. Accordingly, they function as sub-processors to provide the Services.

Entity NameCountry
Klevu OyFinland
Klevu IncUnited States
Klevu India Pvt LtdIndia