Legal
Sub-processors
Spyingbee uses the following third-party sub-processors to deliver the service. We only share the minimum data required for each.
Last updated: August 21, 2026
| Sub-processor | Purpose | Location | Usage |
|---|---|---|---|
| Hetzner | Application hosting and database infrastructure | Germany (EU) | Core |
| Mistral AI | AI-powered signal classification, weekly briefs, and Slack Q&A responses | France (EU) | Core |
| Langfuse | Tracing for the AI assistant — records each conversation, the tools the assistant ran, and the model’s replies, so we can debug and improve it. Traces from the web app also carry the signed-in user’s ID and email address. | European Union (Langfuse Cloud EU region) | AI assistant only |
| Paddle | Payment processing, billing, merchant of record. Paddle’s checkout script also loads on our public pricing page, before you have an account. | United Kingdom | Core |
| Paddle Retain (ProfitWell) | Subscription and churn analytics, loaded by Paddle’s checkout script | United States | Loads with Paddle |
| Slack (Salesforce) | Message delivery for competitive signal notifications | United States | If enabled |
| Resend | Transactional email delivery (invitations, weekly briefs) | United States | Core |
| PostHog | Product analytics and session replay across the app and the public site. Recordings mask the contents of input fields. Signed-in users are identified to PostHog by ID, email, name, team and plan. | European Union (EU Cloud) | Core |
| Sentry | Error and performance monitoring; reports may include the user ID of the session that hit the error | United States | Core |
| Decodo | Residential proxy network used to fetch competitor pages that block datacenter traffic. Receives the target URL, never customer data. | United States | Core (crawler) |
| Google (Places API) | Retrieves public reviews and location data for tracked retail competitors. Receives the competitor place query, never customer data. | United States | Retail intelligence only |
| Google Analytics (GA4) | Marketing analytics on the public site | United States | Public marketing pages |
| LinkedIn (Insight Tag) | Advertising and conversion measurement on the public site | United States | Public marketing pages |
We evaluate the security and privacy practices of each sub-processor before onboarding. If we add or replace a sub-processor, this page will be updated accordingly.
Questions about our sub-processors? Contact us at support@spyingbee.com.