Funpilot - Sub-processor List
Onyx Blue Digital GmbH ("Funpilot") uses the providers below to run the Service. They act as our processors under Art. 28 GDPR: they process personal data only on our instructions and under a data-processing agreement (DPA). This is the named list referred to in §9 of our Privacy Policy.
Where a provider processes personal data outside the European Economic Area (EEA), we rely on appropriate safeguards under the GDPR - typically the European Commission's Standard Contractual Clauses (SCCs).
1. Current sub-processors
| Provider | What it does for us | Data processed | Region and safeguard |
|---|---|---|---|
| Google Cloud Platform - Google Ireland Limited / Google LLC | Hosting, compute, database, file storage, logging and error reporting (Google Cloud operations suite) | The Service data we store for you (account data, preferences, location, activities, conversations, uploaded files) and operational telemetry (error reports, performance traces, logs, which may include IP addresses) | Our project region is europe-west1 (Belgium, EU). Google Cloud DPA; SCCs for support access or processing outside the EEA |
| Google / Firebase Identity Platform - Google Ireland Limited / Google LLC | Sign-in and authentication | Email address, authentication identifiers, sign-in events | US and global. Google Cloud DPA + SCCs |
| Google Maps / Places - Google Ireland Limited / Google LLC | Place search, geocoding and maps | Search terms and the location used for the lookup (your homebase, or your device location if you use it) | US and global. Google DPA + SCCs |
| Google (Gemini) - Google Ireland Limited / Google LLC | AI text and image generation (buddy replies, recommendations, parts of the activity catalogue, generated images) | The inputs needed for the feature - your messages, preferences and prompts | US and global. Google DPA + SCCs; no-training terms where the vendor supports it |
| Anthropic - Anthropic PBC | AI conversation and recommendations | The inputs needed for the feature - your messages, preferences and prompts | US. Anthropic DPA + SCCs; no-training terms where the vendor supports it |
| OpenAI - OpenAI Ireland Limited / OpenAI, L.L.C. | AI conversation and recommendations | The inputs needed for the feature - your messages, preferences and prompts | US. OpenAI DPA + SCCs; no-training terms where the vendor supports it |
| Stripe - Stripe Payments Europe, Limited / Stripe, Inc. | Payment processing for Premium and voluntary "name your price" payments | Billing identifiers, transaction records and invoice data (we do not receive your full card number) | EU and US. Stripe DPA + SCCs |
| Mailgun (Sinch) - Mailgun Technologies, Inc. (Sinch group) | Transactional email and invitation email | Recipient email address and name, and the content of those emails | US/EU. Mailgun DPA + SCCs |
2. Payments and the merchant of record
Onyx Blue Digital GmbH is the seller of record. Because we use Stripe's managed payments, Sold Through Link, LLC acts as the merchant of record for the payment transaction, and the checkout page may show Stripe, Sold Through Link, LLC or another payment-related entity. For certain payment-related purposes those entities act as separate controllers under their own privacy information, so that processing is not covered by this list. See §3 of our Subscription Terms and §7 of our Privacy Policy.
3. AI vendors
We send AI vendors only the inputs needed to produce the feature you are using, and we require data-processing terms that disable training on our data where the vendor supports it. See §3 of our Privacy Policy.
4. What is not on this list
We do not use advertising networks, advertising or conversion-tracking pixels, analytics or behavioural-profiling tools, or session-replay tools. No provider on this list receives personal data for advertising purposes.
5. Changes
We update this list when we add, replace or remove a sub-processor. The current version is always available on our website. If a change affects the categories of recipients described in our Privacy Policy, we update the Policy as well.
If you have questions about this list, or want information about the transfer safeguards for a specific provider, contact us at support@funpilot.ai.