Subprocessors
Last updated
These companies process personal data on braggy's behalf to run the service. We tell business customers by email at least 30 days before we add a new one. Questions: hello@getbraggy.com.
| Company | What for | Data it processes | Based in | Transfer safeguard |
|---|---|---|---|---|
| Cloudflare, Inc. | Hosting, database and file storage, AI (Workers AI), bot protection (Turnstile), inbound email, page analytics | Account data; praise and brags; screenshots and forwarded emails while they're read | United States | EU-U.S. Data Privacy Framework (with the UK and Swiss extensions); EU standard contractual clauses and UK addendum |
| Anthropic, PBC | AI (Claude), only when our main AI model is unavailable | Praise and brags while they're read or written; screenshots and forwarded emails while they're read | United States | EU standard contractual clauses, with the UK and Swiss addenda |
| Resend (Plus Five Five, Inc.) | Sending email | Your email address and the email's content (sign-in links, invitations, alerts); your customers' names and email addresses when braggy asks them for praise | United States | EU-U.S. Data Privacy Framework; EU standard contractual clauses and UK addendum |
Independent controllers
These companies handle data under their own privacy policies, not on our instructions:
- Google LLC (United States), if you sign in with Google: Google shares your name, email address and Google account ID with us.
- Paddle.com Market Limited (United Kingdom), for payments: Paddle is the merchant of record and handles your card and billing details.
- Block, Inc. (United States), if you connect Square: Square shares your business profile and your customers, orders, payments and appointments with us. braggy can read them but never changes anything in Square.
- Meta Platforms, Inc. (United States), if you connect a Facebook Page or Instagram account: Meta shares the Page’s and the Instagram account’s name and id and an access token with us, and publishes the brags you choose to post.
No personal data
We also use Have I Been Pwned to check that a new password hasn't appeared in a known breach (it receives only the first five characters of a one-way hash of the password), and UptimeRobot to watch that braggy is up.