Sub-processors

Brimble Inc. ("Brimble", "we", "our", or "us") relies on certain third-party service providers ("Sub-processors") to operate and deliver the Brimble platform.

1. Overview

These providers assist with infrastructure hosting, monitoring, analytics, email delivery, payments, content delivery, and other operational services. Sub-processors may process limited customer data only as necessary. Brimble carefully selects vendors that maintain strong security and privacy practices.

2. Infrastructure Providers

Hetzner

Purpose: Cloud infrastructure and compute hosting.

Data Processed: Application workloads, networking traffic, and infrastructure metadata.

DigitalOcean

Purpose: Cloud infrastructure services and compute resources.

Data Processed: Application hosting environments and infrastructure metrics.

ScaleGrid

Purpose: Managed database infrastructure and database operations.

Data Processed: Database workloads, database metadata, and operational metrics.

3. Content Delivery and Networking

Cloudflare

Purpose: CDN, DNS management, caching, and security services including traffic filtering and DDoS mitigation.

Data Processed: IP addresses, request metadata, and network traffic information.

4. Object Storage

Tigris

Purpose: Object storage services for files, assets, and user-generated storage.

Data Processed: Stored files and associated storage metadata.

5. Monitoring and Logging

Better Stack

Purpose: System monitoring, logging, alerting, and incident detection.

Data Processed: Application logs, infrastructure logs, and performance metrics.

Google Cloud Uptime Monitoring

Purpose: External uptime monitoring of Brimble services.

Data Processed: Service availability metrics and monitoring results.

Laravel Nightwatch

Purpose: Application monitoring for PHP-based workloads.

Data Processed: Application performance metrics and debugging information.

6. Analytics

PostHog

Purpose: Product analytics and platform usage insights.

Data Processed: Usage analytics, feature interaction data, pseudonymous identifiers, page and event metadata, and session replay data with masking controls.

7. AI Model Providers

Together AI

Purpose: AI model infrastructure and inference services.

Data Processed: Model prompts, input data, and generated output processed through AI APIs.

8. Email Delivery

Resend

Purpose: Transactional email delivery including account notifications, authentication emails, and platform alerts.

Data Processed: Email addresses and email content required to deliver messages.

9. Payment Processing

Stripe

Purpose: Global payment processing and subscription management.

Data Processed: Payment information, billing data, and transaction metadata.

Paystack

Purpose: Payment processing for supported regions.

Data Processed: Payment details, billing data, and transaction information.

10. Development Infrastructure

GitHub

Purpose: Source code hosting, version control, and development collaboration.

Data Processed: Code repositories, commit history, and development metadata.

Docker Hub

Purpose: Container image registry used to distribute and manage application containers.

Data Processed: Container images and metadata.

11. Authentication Providers

External login providers may include: Google Login, GitHub Login

These providers process authentication requests and identity verification data.

12. Sub-processor Updates

Brimble may update this list periodically as new service providers are added or removed.

13. Contact

Questions regarding sub-processors: privacy@brimble.app