Mica ← Home

Trust

Sub-processors

Effective: 20 May 2026 · Last updated: 20 May 2026

This page lists the third-party service providers ("sub-processors" or "Operators" under POPIA) that may process personal information on behalf of Takat (Pty) Ltd ("MeetMica") in delivering the Service. Each is bound by contract to apply technical and organisational measures consistent with our Security commitments, and to process personal information only on our documented instructions and the terms of our Data Processing Agreement.

The list is updated as engagements change. The "Last updated" date at the top of the page reflects the current version. Refer to section 2 for how we notify customers of changes and how you can object.

1. How the list is organised

Each sub-processor is categorised by when its processing applies to your Account:

2. Notification of changes & right to object

2.1 Notification

We will give you at least 30 days' written notice by email and by updating this page before adding a new sub-processor or materially changing the role of an existing one. Notice is sent to the primary contact on your Account. You can subscribe to change notifications at legal@meetmica.com.

2.2 Right to object

If you have a reasonable, documented objection to a new sub-processor — for example, because the change introduces a material privacy or security risk to your data — you may submit the objection in writing within 30 days of our notice. We will work with you in good faith to find a resolution. If we cannot, you may terminate the affected portion of your Subscription on written notice; we will refund pre-paid fees for the unused portion.

3. Current sub-processors

Every row below is flagged REVIEW until verified — see the note at the end of this section.

Sub-processor Purpose Data processed Location Tier
Supabase, Inc. Primary application database, authentication, file storage, serverless functions All Account info, Customer Data, usage logs United States REVIEW: confirm region Core
Vercel, Inc. Web application and marketing site hosting; edge delivery IP addresses, request logs, browser metadata United States · global edge Core
Anthropic, PBC Large language model inference (Claude) for AI-drafted messages, summaries and suggestions Prompts and responses including relevant Customer Data context; no training on customer content United States Core
OpenAI, LLC Speech-to-text (Whisper) for voice-note transcription; supplementary text inference Audio clips you send to Mica, related text prompts United States Core
Resend, Inc. Transactional email delivery (account, invite, billing and security messages) Recipient email address, name, message content United States Core
Stripe, Inc. Card payment processing for international customers Billing contact, payment-method metadata; no full card data stored by MeetMica United States · Ireland (EU) Core
Paystack Payments Ltd. Card and EFT payment processing for African customers Billing contact, payment-method metadata; no full card data stored by MeetMica Nigeria · South Africa Core
Google LLC Google Workspace OAuth, Calendar and Gmail synchronisation when you connect a Google account Calendar event details, email metadata and content you authorise United States · multi-region Integration
Microsoft Corporation Microsoft 365 OAuth, Outlook Calendar and email synchronisation when you connect a Microsoft account Calendar event details, email metadata and content you authorise United States · multi-region Integration
Meta Platforms, Inc. (WhatsApp Business API) WhatsApp messaging — sending and receiving on the WhatsApp number you connect to Mica Mobile numbers, message content, media you send or receive Ireland (EU users) · United States Integration
Apollo Data, LLC (Apollo.io) Lead enrichment — business contact lookups against publicly available B2B data Search queries based on names, companies or domains you provide; returned business contact information United States Optional
Reviewer note The eleven vendors above are inferred from the current codebase. Verify each row before publishing: the legal entity name, jurisdiction of incorporation, processing location and data categories. Add any sub-processor missing from this list (for example, error monitoring, product analytics, helpdesk tooling) before the page goes live. Remove the per-row REVIEW chips once each entry has been confirmed.

4. Affiliates and group companies

MeetMica is operated by Takat (Pty) Ltd. We do not currently engage affiliates or group companies as sub-processors. If we do in the future, they will be added to the list above and you will be notified in line with section 2.

5. Cross-border transfers

Several sub-processors above are located outside the Republic of South Africa. Where personal information is transferred outside South Africa, we rely on one or more of the following bases under POPIA s72:

For transfers originating in the European Economic Area or the United Kingdom, we rely on the EU Standard Contractual Clauses or the UK International Data Transfer Agreement, supplemented where required by a transfer impact assessment.

6. Sub-sub-processors

The sub-processors above may engage their own sub-processors to deliver their services. Each remains responsible to MeetMica for the acts and omissions of its sub-processors. Information about onward sub-processing is published by each provider on its own trust or privacy pages, and is reviewed by MeetMica as part of our vendor-management process.

7. Contact

Sub-processor change subscriptions: legal@meetmica.com

Privacy and DPA questions: privacy@meetmica.com

Security questions: security@meetmica.com

Postal: Takat (Pty) Ltd, REVIEW: registered address

MeetMica is a product of Takat (Pty) Ltd, Reg. 2015/294016/07.