Subprocessors
Last updated: 2 November 2026
This page lists the service providers Zedapex Limited, Lagos uses to run Joinvoo that may process personal data, including Customer Data we process for you under our Data Processing Agreement. Some are used only when a feature is switched on. Transfers outside the EEA and UK are protected as described in our Privacy Policy, usually by the Standard Contractual Clauses (SCCs), the UK Addendum, or the provider’s certification under the EU–US Data Privacy Framework (DPF).
1. Our subprocessors
| Provider | Purpose | Data involved | Location / transfer |
|---|---|---|---|
| Railway | Cloud hosting of the application, database and backups | All data stored in the Service | Data-centre region chosen by Zedapex (USA or EU); SCCs where outside the EEA |
| Cloudflare | Network security, traffic delivery, approximate visitor country and city, and HTTPS for customers’ own link and white-label domains | IP address, request data, domain names | Global network, USA-based; DPF / SCCs |
| Resend | Sending emails (confirmations, alerts, receipts, notices, tips) | Email address, name, email content | USA; SCCs |
| Anthropic | AI: Team inbox AI replies, AI setup (Fill, Test), Joe assistant, support chat answers and translation | The text sent for that task (for AI replies: AI notes, recent messages of one conversation, up to two photos) | USA; SCCs |
| OpenAI | AI tasks as above where we use it as the AI provider; speech-to-text for Team inbox voice notes when AI replies are on | As above; voice notes of up to 3 minutes | USA; DPF / SCCs |
| IPinfo | Looking up the country of an IP address for logins and sign-up | IP address | USA; SCCs |
| Payment providers: Stripe, Paystack, Flutterwave, Bachs | Processing card, bank and mobile-money top-ups (only the ones offered to you at checkout) | Name, email, amount, payment reference; card details go to the provider, not to us | USA, Africa or the provider’s own locations; SCCs or the provider’s safeguards |
| Gatevoo (Zedapex) | Our own crypto checkout (USDT, BTC) for top-ups | Account reference, amount, transaction reference | Run by Zedapex on its hosting providers |
| VooSquare (Zedapex) | Zedapex’s account hub: single sign-in, billing and affiliate records across Zedapex apps, and, where enabled, the support inbox | VooSquare ID, email, name, spend amounts, support messages | Run by Zedapex on its hosting providers |
Joinvoo also loads public exchange rates and, on its own website pages, fonts from Google Fonts. No account or Customer Data is sent for exchange rates; Google Fonts receives the visitor’s IP address and browser details to deliver the font files. Landing pages that customers build use fonts served by Joinvoo itself.
2. Recipients you choose (not our subprocessors)
When you connect these, you instruct us to send data to them. They receive it under your own agreement with them and their own terms and privacy policies. They are not our subprocessors, and you are responsible for having a lawful basis to send them data.
- Telegram: to run your bots, invite links, join requests, channel copies, mini apps and managers’ Business chats, and to send replies, Flows and alerts.
- Ad platforms: Meta (Conversions API), TikTok (Events API), Snapchat (Conversions API), Google (Google Ads and its Data Manager API) and Microsoft Advertising, for conversion events and, if you connect them, reading ad spend and making rule changes you set.
- Your own systems and tools: your bot server, tracker postbacks (for example Voluum, RedTrack, BeMob, Keitaro, Binom), webhooks, and tools you connect to our API (for example Google Sheets or Zapier).
- Your partners: affiliate programs, brokers, casinos, shops and CRMs that send postbacks to Joinvoo, and the offer links you send people to.
- Your clients: for agencies, the clients you invite to your white-label site.
3. Changes to this list
We update this page before a new subprocessor starts processing Customer Data, and tell customers at least 15 days in advance by email or in the dashboard, except for urgent changes needed for security or continuity, which we announce as soon as we can. You can object as described in section 5 of the Data Processing Agreement. The date at the top shows the last change.
Questions: [email protected]