Working draft: some publisher details are still to be filled in and the text is pending legal review.
Sub-processors
Version of 2026-11-02
This document is BeBrief’s, a service published by Hive Horizon. If an agency invited you to BeBrief, it does not replace that agency’s own terms or privacy policy: to learn how the agency uses your data, ask the agency.
The companies that process personal data on behalf of Hive Horizon for BeBrief. Any change is announced to agency owners at least 30 days ahead.
List
| Sub-processor | Role | Data | Location | Safeguards |
|---|---|---|---|---|
| Hetzner Online GmbH | Hosting of the server and database | All service data except files | Germany | Hosted in the European Union |
| [fournisseur du stockage des fichiers] | Storage of uploaded files and designs | Uploaded files, designs, logos | [data centre country, in the EU] | Hosted in the European Union |
| OpenAI, L.L.C. | Brief analysis and the assistant’s replies | Text, messages, file extracts and images sent to the assistant | United States | EU–US Data Privacy Framework and standard contractual clauses; API data not used for training |
| Anthropic, PBC | Brief analysis and the assistant’s replies when a Claude model is used | Text, messages, file extracts and images sent to the assistant | United States | [base du transfert vers Anthropic : DPF et/ou clauses contractuelles types]; API data not used for training |
| TypeSafe | Quick checks: a message’s language, what a request to the assistant asks, whether the conversation has settled a change, whether the brief matches the files | Message text, brief fields, text lines from files; never images | [pays d’hébergement de TypeSafe] | European Commission standard contractual clauses; customer data not used for training |
| [fournisseur d’envoi d’emails] | Sign-in links and notification emails | Email address, name, project title | [country] | Data processing agreement (art. 28) |
| Stripe Payments Europe, Ltd. | Payment and invoices for the agency’s subscription | Agency name, owner’s email, payment method (entered at Stripe, never with us) | Ireland (EU), with possible transfers to the United States | EU–US Data Privacy Framework and standard contractual clauses |
Integrations the agency chooses
When an agency connects its own Figma account, files are read with its key, at its request. Figma is not our sub-processor: the relationship is between the agency and Figma.