Sub-processors
Every third party BuildBase shares data with to run the platform, what each one receives, and where it is processed.
Last updated: September 2026
Who processes data for us
These are the parties BuildBase engages to deliver the service. Each one receives only what its function requires, under a contract that holds it to terms no weaker than ours.
| Sub-processor | Function | What it receives | Location |
|---|---|---|---|
| Crisp | Live chat support | Chat messages, browser and device information, pages visited, and - when you are signed in to the console - the name and email on your account, sent automatically so support knows who is writing | France / EU |
| Endorsely | Affiliate referral tracking | Referral ID from an affiliate link, pages visited, and - if you subscribe - the resulting order, so the referring partner can be credited | United States |
| Cloudflare Turnstile | Bot protection | Browser characteristics, interaction patterns (no personal data) | Global (edge network) |
| New Relic | Error and performance monitoring, application logs | IP address, browser and device information, page URLs and timings, error messages and stack traces, and server-side application logs (which can include account identifiers such as email addresses) | United States / EU |
| Stripe | Payment processing | Payment method details, billing address, transaction history, subscription status | United States |
| Mailgun | Email delivery | Recipient email addresses, delivery status, bounce and complaint data | United States / EU |
| Google Cloud Storage | File storage and infrastructure | Uploaded files, file metadata (name, size, type) | United States |
| IPinfo | IP geolocation | IP address, city, region, country, ISP, postal code, timezone | United States |
Independent controllers
These decide for themselves what they do with what they receive, under their own terms. They are not our sub-processors, and we cannot instruct them on your behalf.
- Google Analytics - Website traffic analysis and usage reporting
- Google Tag Manager - Loads the measurement and advertising tags configured for our own sites. It is the container the other Google tags arrive in rather than a tracker of its own.
- Google Ads - Measures which ads led to a signup or a subscription, so we can stop paying for the ones that do not.
- Meta - Measures conversions from ads run on Facebook and Instagram, and builds the audiences those ads are shown to.
- Microsoft Clarity - Session recordings, heatmaps, and user behavior analysis
- Ahrefs - SEO performance and website analytics
The vendors you enable are not on this list
If you use BuildBase to install analytics or advertising tags in your own product, those vendors are yours, not ours. You choose them, you decide what they receive, and they act as independent controllers of it. They are your sub-processors, and they belong in your own privacy notice.
Your console generates that disclosure from whatever you actually have enabled, under Settings › Tracking & tags, so the list you publish stays true as you change it.
Changes
This page is the current list. Customers with a Data Processing Agreement in place are notified of a new sub-processor before it starts processing their data, at the address on their account, and may object on reasonable data-protection grounds.
Questions
Write to [email protected].