1. Overview
Brainpercent, LLC uses the third-party processors below to deliver the Service. This list complements our Privacy Policy, which describes the categories of processors and the data shared with each category. This page is the authoritative current list of specific vendors.
Each subprocessor is bound by a data-processing agreement. Cross-border transfers to the United States rely on the European Commission's Standard Contractual Clauses (SCCs) and, where applicable, the EU-US Data Privacy Framework.
2. Current Subprocessors
| Subprocessor | Category | Purpose | Region |
|---|---|---|---|
| Stripe, Inc. | Payment & billing | Subscriptions, credit-pack payments, Connect Express payouts, tax. Stripe is also an independent controller for its own fraud, AML, and product purposes — not merely our processor | USA |
| Supabase, Inc. | Cloud infrastructure | Postgres database, authentication, file storage | EU (Frankfurt) |
| Vercel, Inc. | Cloud infrastructure | Application hosting, edge delivery, serverless compute | Multi-region |
| Anthropic, PBC | AI model providers | Claude models — text generation, classification, fact-checking | USA |
| fal.ai, Inc. | AI model providers | Live image, audio, and video generation (Seedance, Flux, MiniMax speech, ElevenLabs via fal). By default fal CDN URLs are publicly reachable by anyone with the link until we copy the file into our storage | USA |
| GoAPI | AI model providers | Limited leftover toolkit only (face swap, background remove, podcast lipsync and avatar, finishing jobs already in flight). Not the product image, audio, or video engine | USA |
| Cloudinary Ltd. | Media processing | Video stitching and compose. New playback is copied to our storage; Cloudinary is not the public CDN for new videos | USA |
| Vapi | Voice assistant | Voice assistant orchestration (audio streams, transcripts) | USA |
| Deepgram, Inc. | Voice assistant | Speech-to-text transcription for the voice assistant, reached via Vapi. We have no direct Deepgram API | USA |
| GetLate / Zernio | Social publishing | Authorized publishing to social platforms | USA |
| Meta Platforms, Inc. | Sign-in & connected accounts | Facebook OAuth sign-in (email, basic profile, account ID) and optional Meta Graph reads for Page/Instagram brand scan. Tokens stored encrypted. Publishing to Facebook/Instagram uses GetLate / Zernio, not this row | USA |
| Apollo.io | Sales and outreach | B2B contact enrichment (prospect names, emails, LinkedIn profiles) | USA |
| ReverseContact | Sales and outreach | LinkedIn profile enrichment for outreach and project setup (names, headlines, recent posts, employer) | EU |
| Resend, Inc. | Communications | Transactional email delivery | USA |
| SendGrid (Twilio, Inc.) | Communications | Marketing + bulk email delivery | USA |
| Telegram | Communications | Bot publishing and notifications (content, chat identifiers) | Multi-region |
| Discord, Inc. | Communications | Community and roadmap sync (usernames, submitted ideas) | USA |
| Browserless.io | Operations | Headless web scraping for URL ingestion | EU |
| DataForSEO | Operations | SEO research (keywords, SERP data) | EU |
| Inngest Inc. | Operations | Background job orchestration (generation, publishing, billing, and cron workloads that include account identifiers and content payloads) | USA |
| Make.com | User-configured integrations | Webhook automations you configure (content payloads) | EU |
| WordPress (user-configured) | User-configured integrations | Content export destination you configure (articles, media) | Multi-region |
| Sentry (Functional Software, Inc.) | Analytics & operations | Error tracking, performance monitoring | USA |
| Google LLC | Analytics & operations | GA4 analytics; Google sign-in; Calendar and Meet events you connect; Search Console and Google reviews you connect | USA |
| Microsoft Corporation | Analytics & operations | Microsoft Clarity (anonymized session replay) | USA |
3. Changes
We may add, remove, or replace subprocessors as our infrastructure evolves. For material changes (adding a subprocessor with broad access to user data) we will give registered users at least 30 days' advance notice by email, during which you may terminate your subscription if you object. For non-material changes (replacing a subprocessor in the same category with one offering equivalent privacy guarantees, or regional infrastructure shifts) we update this page without separate notice.
4. Contact
Questions about subprocessors or data-processing agreements: edward@brainpercent.com with subject "Subprocessor Inquiry".