Sub-processors
Last reviewed: October 6, 2026 · Version 2026-10-06-draft-1
In short
These are the companies that process data for BrandTitan and our customers. Items marked 'Only if you connect it' are used only when a customer turns that integration on. We give 30 days' notice before adding or replacing one.
Current sub-processors
| Sub-processor | Purpose | Data processed |
|---|---|---|
| Supabase | Database, authentication, file storage, and background functions | All account data and Customer Data, uploaded files, call recordings |
| Vercel | Application and website hosting | Requests and responses passing through the app, including account and Customer Data in transit; request logs |
| Fly.io | Media processing workers (video and image rendering) | Customer media files and rendering inputs |
| Anthropic | AI text generation and reasoning | Task inputs sent to AI features: brand details, prompts, page text, and message content for drafted replies |
| OpenAI | AI text and image generation | Task inputs sent to AI features: prompts and related brand content |
| Kie.ai | AI image and video generation | Prompts and reference media for generated assets |
| Twilio | Text messaging and voice calling | Phone numbers, message content, call metadata and recordings |
| Mailtrap | Transactional and campaign email delivery | Recipient names and email addresses, email content, delivery events |
| Stripe | Subscription billing and payments | Customer billing contact, plan, and payment details (card data is held by Stripe) |
| Sentry | Error monitoring | Technical error reports, which may incidentally include account identifiers |
| Inngest | Background job orchestration | Job payloads referencing account and Customer Data records |
| FirecrawlOnly if you connect it | Web page retrieval (for example reading a customer’s website to build a brand profile) | Public web page URLs and content |
| MetaOnly if you connect it | Facebook and Instagram advertising, publishing, lead and messaging integrations | Ad, page, lead and message data; hashed customer identifiers for conversion feedback and audiences |
| GoogleOnly if you connect it | Google Ads, YouTube, Search Console, and Business Profile integrations | Ad, analytics, and channel data; hashed customer identifiers for conversion feedback and audiences |
| TikTokOnly if you connect it | TikTok account connection and video publishing | Account identifiers and videos the customer posts |
[COUNSEL / JAMES: add each provider's processing location and DPA status once confirmed; the plan notes no executed DPAs are documented yet.]
Changes and objections
We update this page before a new sub-processor starts processing Customer Data and email customers at least 30 days ahead. To object on reasonable data-protection grounds, write to legal@brandtitan.app within that period. See the Data Processing Addendum for the full process.