Sub-processors & data retention

Last updated 14 September 2026 · Ospry Suite Ltd, United Kingdom

Who else touches your data

We use a small number of other companies to run the service. Each one is listed here with what it actually does. We do not sell data, and we do not use your data or your clients’ data to train anything.

Fasthosts (IONOS)United Kingdom

Hosts the application and its database. All account data, audit results and encrypted credentials live here.

StripeUnited States

Takes the payments. Receives your name, email and billing address; card details go straight to Stripe and never reach us.

CloudflareGlobal (EU/UK edge)

DNS and network protection for our own domains. Does not store your audit data.

BrevoEuropean Union

Sends transactional email such as password resets and invitations. Receives the recipient's email address only.

GoHighLevelUnited States

Where your own CRM data already lives. We read and write it only at your instruction, through the app you installed.

GoogleUnited States

Search Console, Analytics and Business Profile data, only for properties you connect yourself, and read-only. Google Workspace also receives mail sent to our own addresses.

AnthropicUnited States

Powers the AI features: Cue's replies to your website visitors, and Nib's draft content. Runs on our key unless you connect your own, in which case it runs on yours. Anthropic does not train on anything sent through the API.

How long we keep things

Account detailsUntil you delete the account

Removed within 14 days of deletion, including from backups as they age out.

Audit results and rankingsWhile the site is in your workspace

Deleting a site deletes its audits, keyword history, reports and uploaded photos immediately.

Connected credentialsUntil you disconnect

Encrypted at rest. Disconnecting, or uninstalling the GoHighLevel app, clears them straight away.

BackupsRolling 14 days

Nightly database snapshots, kept so we can recover from a failure. They sit on the same UK server and expire on their own.

LogsRolling 30 days

Operational logs for fixing faults. They record what happened, not the contents of your pages.

Your clients’ data

If you are an agency, the data you bring belongs to you and your clients. We process it on your instructions and for no other purpose. You can export or delete a workspace at any time from Settings, and deleting removes the underlying records rather than hiding them.

Changes and contact

If we add a sub-processor, this page changes first. Anything about data, security or a suspected vulnerability: hello@osprysuite.com.