Third party services for FuseBase

With whom we share personal data

The providers below support the stated service functions. Their role depends on the processing activity: a provider processing customer personal data on FuseBase’s behalf is a subprocessor for that activity; marketing and analytics providers may process FuseBase’s controller data, payment providers and sales channels may have independent-controller activities, and customer-connected providers may operate under Customer’s own arrangements. Listing a software publisher does not alone establish data receipt or subprocessor status. These disclosures supplement Privacy Policy sections 6 and 8 and the DPA section 4; applicable subprocessor agreement, responsibility, notice and objection duties continue to apply.

1 Primary infrastructure and supporting services

Microsoft Azure provides FuseBase’s primary hosting and storage infrastructure. AWS use is secondary and limited to service-specific functions. Other providers support the particular services described in the relevant sections below, including communications, analytics, payments, and AI.

A provider’s inclusion in this list identifies its role in the relevant service and does not mean that every provider hosts the FuseBase platform or receives all Customer Data. Storage and processing locations depend on the applicable service and deployment and remain subject to our contractual commitments, including the Data Processing Agreement.

For health information, the permitted storage and processing scope is established in the applicable DPA and any required Business Associate Agreement. Permission to store health information does not by itself cover its use with AI features or external integrations; those uses must also fall within the expressly agreed scope.

Provider	Role in FuseBase	Service scope	Operator	Privacy information
Microsoft Azure	Primary infrastructure	Core platform hosting and data storage; managed AI services are described separately in section 7	Microsoft Corporation or the applicable contracting affiliate	Microsoft Privacy Statement
Amazon Web Services	Secondary, service-specific provider	Limited supporting services, including email delivery through Amazon Simple Email Service (SES), described in section 6	Amazon Web Services, Inc. or the applicable contracting affiliate	AWS Privacy Notice

2 Marketing and analytics websites

Optional tracking and advertising remain subject to applicable consent and opt-out requirements. Provider account settings and browser tools have limited scope and do not replace required website controls. The listed functions do not mean every provider is enabled on every page or product.

We share and disclose your Cookies and Usage Data for the web and mobile analytics purposes and to personalize the content provided to you in the Internet: for example, to offer you our services in which you might be interested.

Provider	Who operates it	Purpose, for which we use it	Where can you read the privacy policy	How can you opt out transmitting and processing the data generated by Cookies by third party provider
Facebook Ads	Facebook Ads operated by Facebook: (1) Facebook Inc., 1601 Willow Road, Menlo Park, CA 94025, USA, – if you live outside the EU; or (2) Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, – if you live in the EU	(1) to track the Website traffic and your behavior at the Website; (2) analyze, how you use the Website to improve its performance and manage advertising placements based on your interests and preferences	https://www.facebook.com/about/privacy/	via your Facebook account settings
Google Analytics	Google: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA	(1) to track the Website traffic and your behavior at the Website; (2) analyze, how you use the Website to improve its performance and manage advertising placements based on your interests and preferences	https://policies.google.com/privacy	The Analytics opt-out add-on affects supported Google Analytics scripts only; it does not stop all collection or advertising.
Google Search Console	Google: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA	to measure the Website traffic and performance, fix issues, and make it shine in search results	https://policies.google.com/privacy	The Analytics opt-out add-on does not provide an opt-out for this service. Applicable choices depend on the data source and processing; see our Privacy Policy and contact legal@thefusebase.com.
Google Tag Manager	Google: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA	to manage tags, we use on the Website and in the Services	https://policies.google.com/privacy	The Analytics opt-out add-on does not provide an opt-out for this service. Applicable choices depend on the data source and processing; see our Privacy Policy and contact legal@thefusebase.com.
Google BigQuery	Google: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA	to make ML and predictive modeling and data analysis	https://policies.google.com/privacy	The Analytics opt-out add-on does not provide an opt-out for this service. Applicable choices depend on the data source and processing; see our Privacy Policy and contact legal@thefusebase.com.
Google Looker Studio	Google: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA	to perform data analysis, track KPIs and generate reports	https://policies.google.com/privacy	The Analytics opt-out add-on does not provide an opt-out for this service. Applicable choices depend on the data source and processing; see our Privacy Policy and contact legal@thefusebase.com.

3 Payment processing

We may share the Personal Data specified in providers’ privacy policies to handle payments, including payments by credit card, bank transfer or other means:

With whom we share the information	Where can you read the privacy policy
Recurly, operated by Recurly, Inc., 400 Alabama Street Suite 202 San Francisco, CA 94110 United States	https://recurly.com/legal/privacy/
PayPal, operated by PayPal, Inc., 2211 North First Street San Jose, CA 95131	https://www.paypal.com/us/webapps/mpp/ua/privacy-full
Stripe, operated by Stripe, Inc., 510 Townsend Street San Francisco, CA 94103 United States	https://stripe.com/privacy

4 Subscription sales channels

We may share the Personal Data specified in providers’ privacy policies when you purchase a subscription to the Services.

With whom we share the information	Where can you read the privacy policy	Other comments
Google Play, operated by Google	https://policies.google.com/privacy	If you purchase a subscription to the Services via Google Play, all payment processes and sharing of Personal Data are regulated by Terms of Services located at https://play.google.com/about/play-terms.html
App Store, operated by Apple Inc., One Apple Park Way, Cupertino, CA 95014, USA.	https://www.apple.com/legal/privacy/en-ww/	If you purchase a subscription to the Services via App Store, all payment processes and sharing of Personal Data are regulated by Apple Store – Terms & Conditions located at https://www.apple.com/legal/internet-services/

5 Advertising and engagement providers

We may share cookies, Usage Data and email addresses to optimize and serve advertising based on your past use of these services, subject to applicable choices and law:

With whom we share the information	Where can you read the privacy policy	How can you opt out transmitting and processing the data generated by third party provider’s cookies
Linkedin Marketing Solutions, operated by LinkedIn Corporation, 1000 W Maude AveSunnyvaleCA94085 or its affiliates	https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy	as described at https://www.linkedin.com/help/linkedin/answer/62931?trk=microsites-frontend_legal_privacy-policy&lang=en
Convertbox, operated by WebActix Ltd., Unit 3, 90 Whakakake Street Tauriko Tauranga 3110 New Zealand	https://convertbox.com/privacy-policy/ and https://convertbox.com/cookie-policy/	as described at https://convertbox.com/privacy-policy/
Google AdSense, operated by Google	https://policies.google.com/privacy	by installing the add-on for your browser https://chrome.google.com/webstore/detail/iba-opt-out-by-google/gbiekjoijknlhijdjbaadobpkdhmoebb
Getsitecontrol, operated by Getwebcraft Limited, Klimentos 41-43, Klimentos Tower, Flat/Office 25, 1061, Nicosia, Cyprus	https://getsitecontrol.com/privacy/	as described at https://getsitecontrol.com/privacy/
Userpilot, operated by Userpilot, Inc., 2035 Sunset Lake Road, Suite B-2, Newark, Delaware 19702, USA	https://userpilot.com/privacy-policy	as described at https://userpilot.com/privacy-policy

6 Communications and service support

We may share Usage Data, email addresses and the Personal Data specified in providers’ privacy policies to support interaction with us, including email notifications, chat, interaction history and other communications:

With whom we share the information	Purpose, for which we share the information	Where can you read the privacy policy
Zoho Chat, operated by Zoho Corporation (US) or its affiliates	conducting customer service	https://www.zoho.com/privacy.html and https://www.zoho.com/privacy.html#long
Zoho CRM, operated by Zoho Corporation (US) or its affiliates	transition of the information from the Website and storing the information about interactions with you	https://www.zoho.com/privacy.html and https://www.zoho.com/privacy.html#long
Amazon Simple Email Service (SES), operated by Amazon Web Services or its affiliates	ensuring the possibility to communicate with you and send marketing emails	https://aws.amazon.com/privacy/?nc1=f_pr
Google Cloud Vision, operated by Google	conducting customer service via using OCR services	https://policies.google.com/privacy

7 AI infrastructure and model processing providers

FuseBase obtains its standard managed AI services through Microsoft Azure. The entries below identify the providers involved in processing data for those services, including any separately operated model services accessed through Azure. Not every listed provider processes data for every feature or customer.

Model developers are identified as data recipients only where the applicable service or deployment involves processing by that developer.

Provider or service	Processing role and purpose	Data involved	Service and data-processing information
Microsoft Azure, provided by Microsoft Corporation or the applicable contracting affiliate	Primary cloud infrastructure and managed AI services, including Azure OpenAI where used; model inference and related service operations	Prompts, instructions, relevant workspace content, uploaded materials, outputs, and associated technical metadata, depending on the feature	Microsoft DPA; Models sold by Azure data handling
Anthropic: Claude through Microsoft Azure, where enabled	Operator and processor for Claude services accessed through Microsoft Foundry; applicable hosting and safety-review arrangements depend on the selected deployment	Prompts, submitted context and materials, outputs, and associated service metadata relevant to the Claude service	Claude in Foundry data handling

For Azure OpenAI, Microsoft operates the service and the model’s OpenAI origin does not by itself mean that prompts or outputs are disclosed to OpenAI. Other model offerings may involve a separate operator. Open-source or open-weight model developers are not data recipients solely because their models are used.

Customers are responsible for confirming the suitability of their selected AI setup, including applicable storage, retention, and processing arrangements, as described in Section 8 of the AI Supplemental Terms. For FuseBase-managed AI, customers can review FuseBase’s disclosures and agreed scope and contact FuseBase for clarification. For their own API or subscription accounts, customers should confirm relevant requirements with their provider. FuseBase remains responsible for its applicable contractual and legal obligations.

Customer-connected AI accounts, API keys, and external integrations may involve additional providers under the applicable customer configuration. Changes to subprocessors engaged by FuseBase remain subject to the applicable Data Processing Agreement.