Subprocessors
Last updated on March 20, 2026.
BoundBot uses the following third-party subprocessors to deliver its Services. This list is maintained as part of our commitment to transparency under our Data Processing Agreement and Privacy Policy.
We will update this page at least 30 days before engaging a new subprocessor. If you have concerns about a subprocessor, please contact us at privacy@boundbot.com.
Infrastructure and Hosting
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| Google Cloud Platform | Cloud hosting, compute, and AI inference (Vertex AI / Gemini) | All service data, conversation content, embeddings | United States |
| Supabase | PostgreSQL database, authentication, file storage, realtime | User accounts, all application data, uploaded files | United States |
| Redis infrastructure | Message queuing, caching, background job processing | Job metadata, temporary cache data | Varies by hosting environment |
| Vercel | Web application hosting and CDN | Web traffic, analytics data | Global (Edge) |
Billing and Payments
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| Lemon Squeezy | Payment processing, subscriptions, invoicing | Billing details, subscription status, payment events | United States |
Communications
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| Resend | Transactional email delivery (invitations, notifications) | Recipient email addresses, email content | United States |
Messaging Channel Platforms
These platforms are used when customers connect their messaging channels. Data is processed by these platforms according to their own terms.
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| Meta Platforms (WhatsApp, Messenger, Instagram) | Message delivery and receipt for connected channels | Messages, sender profiles, channel metadata | United States / Global |
| Telegram | Message delivery and receipt for connected Telegram bots | Messages, sender profiles | Global |
| Slack Technologies (Salesforce) | Message delivery and receipt for connected Slack workspaces | Messages, user profiles, workspace metadata | United States |
| Discord | Message delivery and receipt for connected Discord servers | Messages, user profiles, server metadata | United States |
Analytics and Monitoring
Analytics subprocessors are only activated after users provide cookie consent. See our Cookie Policy for details.
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| Google Analytics (Google LLC) | Website analytics and usage measurement | Page views, events, anonymized IP addresses | United States |
| Microsoft Clarity | Session recording and heatmaps for UX analysis | Page interactions, anonymized session recordings | United States |
| Meta Platforms (Facebook Pixel) | Conversion measurement and marketing attribution | Marketing events, page visits, advertising attribution data | United States / Global |
| Vercel Analytics | Website performance and visitor analytics | Page views, performance metrics | United States |
| Lemon Squeezy Affiliate | Affiliate and referral attribution | Referral identifiers, landing page attribution data | United States |
Content Management
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| Sanity | Content management system for marketing pages and blog | Marketing content only (no user personal data) | United States |
Contact
If you have questions about our subprocessors or wish to receive notifications about changes, please contact us at privacy@boundbot.com.