Last updated 30 September 2026

Sub-processors

This is the list of companies that handle data on our behalf in order to run MeloHello. It is the companion to our Data Processing Agreement, and it is written to be checkable rather than reassuring.

Why this list exists

When we process personal data on your behalf, we are your processor and you remain responsible for that data. You are entitled to know who else touches it, because a processor that quietly subcontracts removes your ability to assess the risk you are accountable for.

Each entry below is a company that processes data on our instructions, under a written agreement, and only for the purposes described. None of them are permitted to use your data for their own purposes.

The sub-processors we use

Items marked as to be confirmed are still being finalised. We would rather show you an unfinished field than name a provider we have not actually contracted with.

Sub-processor	What it processes for us	Where it processes it
Meta Platforms, Inc. (WhatsApp Business Platform / Cloud API)	Transport and delivery of WhatsApp messages, message templates, and the account, phone-number and quality signals that the WhatsApp Business Platform maintains.	Meta's own data centres, together with any local-storage region selected for the account. See Meta's Data Privacy & Security documentation for the current locations and retention limits.
[payment gateway provider to be confirmed]	Payment processing, where a workflow you configure collects money from your customers. Only involved if you enable payments.	[processing location to be confirmed]
[SMS provider to be confirmed]	Delivery of SMS messages, where you send SMS alongside WhatsApp. Only involved if you enable SMS.	[processing location to be confirmed]
[AI provider to be confirmed]	Generation of AI-assisted replies, where you enable that feature. Conversation content passed to it depends on how you configure the workflow.	[processing location to be confirmed]
[hosting and infrastructure provider to be confirmed]	Application hosting, database storage, object storage for media, backups, logging and monitoring.	[processing location to be confirmed]

The Meta and WhatsApp position

Meta sits in a different category from the rest, and it is worth being precise about why. The WhatsApp Business Platform carries your messages, and Meta processes them as a processor acting on behalf of the business running the account. That means two things follow at once.

First, as between you and us, Meta is a sub-processor for the message data that flows through the WhatsApp Business Platform. Second, Meta also handles some data in its own right — account, phone-number and quality signals, and the abuse and spam detection that keeps the platform usable. For that part Meta acts under its own terms, not ours, and its WhatsApp Business Data Processing Terms and Meta Hosting Terms for Cloud API govern it.

The practical consequence is that a request to delete message data can involve two organisations, and the timeline is bounded by Meta as well as by us. Meta retains message data for a maximum of 30 days for delivery and retransmission, and we cannot shorten that period by contract.

Adding or replacing a sub-processor

We will update this page and the date above whenever we add a sub-processor that handles personal data, and we will give notice before a new sub-processor starts processing your data. If you subscribe to a plan with a written agreement, that notice period is set out in the Data Processing Agreement.

If you object to a new sub-processor on reasonable data-protection grounds, tell us. We will either find a way to provide the service without it or let you terminate the affected part of the subscription without penalty for the remaining term.

If you think this list is wrong

Tell us. A sub-processor list that has drifted out of date is a compliance problem before it is a customer-service one, and we would rather correct it than be told about it by a regulator.