Introduction
This page identifies material providers that may process personal data in connection with Mitra and distinguishes them from third-party platforms that may have their own independent roles.
1. Core service providers
Hetzner Online GmbH
Purpose: Infrastructure hosting, computing, storage, databases, networking and backups.
Information that may be processed: Business-account data, application data, website-chat information, WhatsApp communication information, CRM information, appointments, tickets, configuration and technical logs, depending on the customer's use of Mitra.
Mitra seeks to use European infrastructure configurations where appropriate.
OpenAI
Purpose: AI inference for business-specific responses, assistance and workflows.
Information that may be processed: Limited conversation context, customer instructions and selected business knowledge required for the requested AI operation.
Mitra's policy is to send only context reasonably necessary for the requested function.
OpenAI states that data submitted through its API platform is not used to train its models by default unless the organisation explicitly opts in. Mitra's policy is not to opt customer data into general model training. (OpenAI)
Processing locations and authorised subprocessors may depend on the applicable OpenAI account, service configuration and current provider arrangements.
2. Third-party platforms and services
The following services may have independent roles depending on how they are used.
Meta / WhatsApp
Meta provides the WhatsApp Business Platform, onboarding, message transport, templates and related platform functionality.
Information processed through WhatsApp is also subject to applicable Meta and WhatsApp terms and privacy information.
Stripe
Stripe may be used for subscription payments, fraud prevention, billing and financial compliance.
Mitra does not intentionally send WhatsApp conversation content or private CRM information to Stripe as part of ordinary subscription processing.
Analytics and advertising providers
Analytics or advertising services may be used on Mitra's public website where enabled and where the necessary consent has been obtained.
Such services must not intentionally receive private customer conversations, WhatsApp access credentials or private workspace information.
3. Integrations
Other integrations may process customer information where a customer enables them.
Mitra assesses material providers before enabling routine transfers of personal data and updates its relevant privacy information where required.
4. International transfers
Some providers or their authorised subprocessors may process information outside the European Economic Area.
Where applicable, Mitra uses lawful transfer mechanisms such as adequacy decisions, European Commission Standard Contractual Clauses or another legally permitted mechanism.
5. Changes
Mitra may add or replace providers as the Service evolves.
Where Mitra acts as Processor and a new subprocessor will routinely process customer personal data, customers will be informed where required under the applicable agreement or data-processing terms.
6. Contact
Questions concerning subprocessors: privacy@mitra.gr