Subprocessors
Vendors Etropo sends customer data to in order to run the service. Each entry names the purpose, the data sent and where it is processed. Additions are announced on the Updates page before they take effect; the Third-Party and Vendor Management Policy describes how vendors are chosen and reviewed.
Subprocessors (16)
Vercel • Application hosting
Germany (Frankfurt, functions), USA (control plane), global edge network
Runs the web application and API, builds and deploys every release, serves static assets from its edge network, and provides the AI Gateway through which model requests are routed.
- Data processed
- All application traffic in transit, function logs, environment configuration. Budget data passes through; it is stored in Supabase.
- Website
- vercel.com
- DPA
- Data processing agreement
Supabase • Database, authentication, storage
Germany (AWS eu-central-1, Frankfurt)
Hosts the PostgreSQL database, authentication (passwords, sessions, two-factor), file storage and daily backups.
- Data processed
- All customer data: budgets, line items, actuals, comments, organisation and user records, encrypted integration tokens.
- Website
- supabase.com
- DPA
- Data processing agreement
Amazon Web Services • Infrastructure (via Supabase)
Germany (AWS eu-central-1, Frankfurt)
Underlying cloud for the Supabase database and storage.
- Data processed
- Same as Supabase, encrypted at rest.
- Website
- aws.amazon.com
Stripe • Payments
USA
Subscription billing, card processing and the customer billing portal.
- Data processed
- Billing contact name and email, payment method (held by Stripe only), subscription and invoice records.
- Privacy policy
- stripe.com
- DPA
- Data processing agreement
Anthropic (via Vercel AI Gateway) • AI model provider
USA
Powers AI Budget Buddy, dashboard building, Marketing Brain and the Slack and Teams assistants (Claude Opus 5.5 and Claude Haiku 5.5).
- Data processed
- The content of a user’s question and the budget data the user is allowed to see, when the user asks; for organisations with Budget Buddy enabled, also budget line-item names (daily) and Marketing Brain entries (weekly) from two scheduled jobs. Not used for model training under the API terms.
- Privacy policy
- anthropic.com
- DPA
- Data processing agreement
OpenAI • AI model provider
USA
Analyses uploaded spreadsheets (CSV, XLSX) when a customer imports a budget file.
- Data processed
- The uploaded file and the structure extracted from it, sent only when a user imports a file. Not used for model training under the API terms.
- Privacy policy
- openai.com
- DPA
- Data processing agreement
Mistral AI • AI model provider
France
Text extraction (OCR) from PDF invoices a customer uploads or forwards by email.
- Data processed
- The uploaded PDF, sent only when a user submits one.
- Website
- mistral.ai
- DPA
- Data processing agreement
Resend • Transactional email
USA
Sends sign-up, invitation, notification and trial emails; receives invoice emails forwarded to a customer’s inbound address.
- Data processed
- Email addresses, names, email content including forwarded invoices.
- Privacy policy
- resend.com
- DPA
- Data processing agreement
Upstash • Rate limiting
Germany (AWS eu-central-1, Frankfurt)
Redis store for rate-limit counters and short-lived chat state for the Slack and Teams assistants.
- Data processed
- User and organisation identifiers, IP addresses as rate-limit keys, conversation state for the chat assistants. No budget content.
- Website
- upstash.com
- DPA
- Data processing agreement
Cloudflare • Bot protection
Global
Turnstile challenge on sign-in and sign-up.
- Data processed
- Browser and request metadata needed to tell a person from a bot.
- Website
- cloudflare.com
- DPA
- Data processing agreement
Sentry • Error monitoring
Germany
Captures application errors and performance traces; replays a 10% sample of sessions, and every session with an error, with text masked.
- Data processed
- Error stack traces, request metadata, user identifier, IP address.
- Website
- sentry.io
- DPA
- Data processing agreement
Mixpanel • Product analytics
USA
In-app product analytics and session replay used to understand how features are used and to diagnose problems.
- Data processed
- User and organisation identifiers, page and feature events, session recordings of the application interface with all text and typed input masked (the organisation name entered at sign-up excepted).
- Privacy policy
- mixpanel.com
- DPA
- Data processing agreement
Segment (Twilio) • Analytics pipeline
USA
Server-side event collection that feeds product analytics and marketing attribution.
- Data processed
- User identifier, email, organisation identifier, product events.
- Privacy policy
- segment.com
- DPA
- Data processing agreement
Intercom • Customer support
USA
In-app support messenger and help conversations.
- Data processed
- Name, email, organisation, conversation content and anything a customer attaches to a conversation.
- Privacy policy
- intercom.com
- DPA
- Data processing agreement
Linear • Issue tracking
USA
Bug reports submitted from inside the application are created as issues for engineering.
- Data processed
- Reporter email, report text and any screenshot attached to the report.
- Privacy policy
- linear.app
- DPA
- Data processing agreement
Braintrust • AI observability
USA
Traces every AI call the application makes (Budget Buddy chat and the Slack/Teams bot, dashboards, spreadsheet and invoice analysis, Marketing Brain jobs) so answer quality can be evaluated.
- Data processed
- The prompt, tools used and output of each call: chat messages, the budget data included in the request, line-item names, extracted invoice text and the content of uploaded files. An organisation can ask to be excluded from tracing.
- Privacy policy
- braintrust.dev
- DPA
- Data processing agreement
Customer-connected integrations (9)
These receive data only after an admin in your organisation connects them, and stop when the connection is removed. They are listed for transparency; strictly, they are services you choose rather than Etropo subprocessors.
Google (Ads, Sheets, sign-in) • Advertising data, spreadsheet sync, identity
USA and global
Imports ad spend from Google Ads, syncs budgets to Google Sheets, and signs users in with a Google account.
- Data processed
- Ad account spend; the budget rows written to a sheet; the Google account email on sign-in.
- Privacy policy
- policies.google.com
LinkedIn • Advertising data
USA
Imports ad spend from LinkedIn Campaign Manager.
- Data processed
- Ad account spend.
- Privacy policy
- linkedin.com
Meta • Advertising data
USA
Imports ad spend from Meta Ads.
- Data processed
- Ad account spend.
- Privacy policy
- facebook.com
TikTok • Advertising data
USA and Singapore
Imports ad spend from TikTok Ads.
- Data processed
- Ad account spend.
- Privacy policy
- tiktok.com
Slack • Chat assistant and notifications
USA
AI Budget Buddy in Slack, line-item owner reminders and budget notifications.
- Data processed
- Messages exchanged with the assistant, Slack user identifiers, the budget data a user asks about.
- Privacy policy
- slack.com
Microsoft (Teams) • Chat assistant and notifications
USA and global
AI Budget Buddy in Microsoft Teams and budget notifications through the Bot Framework.
- Data processed
- Messages exchanged with the assistant, Teams user identifiers, the budget data a user asks about.
- Privacy policy
- privacy.microsoft.com
Notion • Budget sync
USA
Mirrors a budget version into a Notion database.
- Data processed
- The budget rows written to Notion.
- Privacy policy
- notion.so
HubSpot • CRM and AI agents
USA
Exposes AI Budget Buddy tools to HubSpot Breeze agents and the HubSpot MCP app.
- Data processed
- Budget answers returned to the HubSpot user; HubSpot user and portal identifiers.
- Privacy policy
- legal.hubspot.com
Attio • CRM
USA / EU
CRM integration connected by the customer.
- Data processed
- The records the customer chooses to sync.
- Privacy policy
- attio.com
