Legal
Subprocessors
Version 1.0 · Effective July 8, 2026
Last updated: July 8, 2026.
To provide the CarcoCRM product and websites, 18092516 Canada Inc. o/a CarcoCRM ("CarcoCRM", "we", "us") uses a small number of trusted service providers ("subprocessors") that may process personal information on our behalf. Each is bound by contract to protect the information and to use it only to provide its service to us. This page lists our current infrastructure subprocessors.
Current subprocessors
| Subprocessor | Purpose | Information processed | Primary location |
|---|---|---|---|
| Twilio | Text message (SMS) delivery to and from your customers | Phone numbers and message content | United States |
| Cloudflare | Asset and document storage (cdn.carcocrm.com) and content delivery | Uploaded photos and documents, and technical request data | Global edge network |
| Website analytics (Google Analytics 4 and Tag Manager), advertising measurement (Google Ads), form protection (reCAPTCHA), sign-in, and business email delivery (Google Workspace) | Usage and device data, email addresses, and message content | United States | |
| Firebase Cloud Messaging (Google) | Push notification delivery to the mobile app | Device tokens and notification content | United States |
Artificial intelligence
Our artificial intelligence features are provided by Carco Technologies and run on our own private infrastructure. We do not send customer or personal information to any third-party artificial intelligence provider.
Planned subprocessors
When paid billing becomes available, we plan to use Stripe as our payment processor to handle subscription payments. We will update this page before that processing begins.
Keeping this list current
We maintain this list as our infrastructure evolves and will update it when we add or change a subprocessor that processes personal information. For the latest list, or to ask a question, email hello@carcocrm.com.