Subprocessors
Last updated 7 October 2026
These are the providers that handle customer data for brandflare. Each receives only what it needs for its job. The privacy policy explains how your questions reach the AI engines, and the security overview how the service is protected.
Running the service
| Provider | What it does | What it receives | Where |
|---|---|---|---|
| Vercel | Hosting, file storage for uploads and reports, cookie-free analytics, and the gateway to AI providers | Everything the service handles, in transit and in storage | United States |
| Neon | Database | Everything the service stores | United States (AWS us-east-1) |
| Clerk | Sign-in and account security | Names, email addresses, sign-in details | United States |
| Stripe | Payments and invoices | Billing contact, card details (never seen by us), invoices | United States |
| Resend | Sending email | Recipients' email addresses and the emails we send them | United States |
AI engines and lookups
Tracked questions are written like an ordinary consumer's and carry no account details. Only Anthropic and OpenAI receive anything else, and their terms forbid them to train on it.
| Provider | What it does | What it receives | Where |
|---|---|---|---|
| Anthropic | Answering tracked questions; reading answers, facts and documents | Tracked questions; answers, facts, documents and pages, under zero data retention | United States |
| OpenAI | Answering tracked questions; reading answers and documents | Tracked questions; answers, facts, documents and pages, under zero data retention | United States |
| Answering tracked questions (Gemini); reading a brand's Google Analytics when its owner connects it | Tracked questions; nothing from Analytics is sent anywhere | United States | |
| Perplexity | Answering tracked questions | Tracked questions | United States |
| DeepSeek | Answering tracked questions in the daily visibility check, unless a workspace is limited to developer services | Tracked questions | China |
| Bright Data | Asking tracked questions in the ChatGPT, Gemini, Google and Copilot apps, unless a workspace is limited to developer services | Tracked questions | Israel |
| Context.dev | Looking up a brand's public details and logo | A brand's website address | United States |
| Unavatar (Microlink) | Looking up a brand's logo as a fallback source | A brand's website address | European Union |
Our own marketing
These see visits to our public website, not the contents of any workspace.
| Provider | What it does | What it receives | Where |
|---|---|---|---|
| Google Analytics | Counting visits to our public site | Visitors' browsing on the public site | United States |
| Meta | Measuring our advertising | Visitors' browsing on the public site; a hashed email when an account is created or a subscription starts | United States |
| Measuring our advertising | Visitors' browsing on the public site | United States |
Changes
We update this page before a new provider receives customer data. To be told when it changes, or for a copy of a provider's data protection terms, write to hello@brandflare.io.