Last updated: 17/04/2026
1. What are external integrations?
MuseRelay allows the customer to connect third-party services to extend chatbot and automation functionality. Common examples:
- Calendars: Cal.com, Google Calendar.
- Automation: n8n, Zapier, Make.
- CRM: HubSpot, Pipedrive, Salesforce.
- Payments: Stripe, PayPal.
- Customer's own APIs.
2. What this means for personal data
Using external integrations may involve:
- Data transfer outside the European Union (if the provider is in the US or other countries).
- Processing by third-party providers with their own privacy policies and DPAs.
- Data storage on servers outside MuseRelay's scope.
3. Customer responsibility
When the customer activates an integration, they assume responsibility for:
- Evaluating the connected provider (data location, certifications, reputation).
- Signing the necessary agreements with that provider (DPA, SCCs if international transfer).
- Ensuring GDPR compliance in the integrations they configure.
- Informing end users about the processing of their data by those external services, in their privacy policy.
- Obtaining consent where necessary.
4. MuseRelay's responsibility
MuseRelay:
- Does not control the use of data in external systems configured by the customer.
- Is not responsible for data processing performed by those services outside the scope of service provision.
- Provides the infrastructure for the connection to be technically possible and secure (transit encryption, token protection, etc.).
- Publishes a list of subprocessors used internally to operate the platform.
5. Most common integrations and considerations
Cal.com
Cal.com is a Germany-based, GDPR-compliant platform with published DPA. If the customer activates Cal.com:
- They create their own Cal.com account and sign its DPA.
- They authorize Cal.com as a subprocessor in their relationship with their own end users.
n8n
n8n can run self-hosted (customer's own server) or on n8n Cloud. The customer must:
- Know where n8n runs and what data it processes.
- Evaluate each external connector invoked by their workflows (Google, Slack, etc.).
- If using n8n Cloud US: assess international transfer impact.
Customer APIs or others
Any customer-owned or third-party endpoint to which data is sent from MuseRelay remains under the customer's sole responsibility.
6. In-product notice
When a customer activates an integration that may involve international transfer, the platform shows a notice recalling this responsibility. Activation implies acceptance of these terms.