Sub-processors
The third parties that process personal data on Founderboard's behalf.
IntoApps Holding B.V. uses the sub-processors below to run the Founderboard platform. Each one is bound by a data processing agreement and may only process personal data on our documented instructions.
| Sub-processor | Purpose | Data processed | Location |
|---|---|---|---|
| Google Cloud (Cloud Run) | Application hosting | All platform data in transit and in memory | EU |
| Supabase (PostgreSQL) | Primary database | Account, venture, tool, chat and progress data | EU |
| Google Cloud Storage | File storage | Uploads, generated avatars and audio | EU |
| Google (Gemini API) | AI generation and embeddings | Prompts, chat messages, venture and tool content sent as context | US / global |
| Hunter.io | Finding and verifying work email addresses of people a founder chooses to look up | Company domain, name of the person being looked up | EU (France) |
| ElevenLabs | Speech synthesis for audio briefings | Text of generated briefings | US |
| Google (Google Ads API) | Launching, pausing and reading the results of search campaigns in a founder's own Google Ads account, when a founder connects one and presses Launch | Ad text, keywords, landing page address, budget and the countries targeted; the Google account address used to connect and an access grant for it | US / global |
| fal.ai | Video and storyboard image generation (ByteDance Seedance and Seedream models) for the Venture Video board | The film's script and choices as the founder wrote them | US |
| SendGrid (Twilio) | Transactional and notification email | Email address, name, message content | US |
| SMTP provider for sign-in links | Magic link delivery | Email address | Per provider |
| Inngest | Background job orchestration | Job payloads containing project and user identifiers | US / EU |
| Meta (WhatsApp Business API) | WhatsApp notifications, if enabled | WhatsApp number, message content | US / global |
| Google Analytics 4 | Product analytics, consent required | Pseudonymous usage events, truncated IP | US / global |
| Google Ads | Measuring Founderboard's own advertising, consent required | The ad click id and when you signed up and first came back; Google Ads cookies in the browser | US / global |
Langfuse, our AI observability system, is self-hosted on our own infrastructure and is therefore not a sub-processor.
For transfers outside the EEA we rely on the European Commission's Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework. See section 7 of the Privacy Policy.
Changes
We will publish material changes to this list here before they take effect. To be notified in advance, email privacy@founderboard.ai.