Last updated 29th September 2026.
Sub-processors
This page lists the companies that process personal data for Spreo. It forms part of our Data Processing Agreement.
We update this page before we start using a new sub-processor.
If you have signed a data processing agreement with us, the terms of that agreement continue to apply to you.
| Supplier | Legal entity | What they do for us | Data shared | Where data is hosted | Where the company is based |
|---|---|---|---|---|---|
| DigitalOcean | DigitalOcean, LLC | Application and database hosting, file storage and backups | All customer data in the product: account details (name, email, user ID, employer), board content (notes, comments, images, votes, actions) and login records. | EU (Amsterdam, Netherlands) | United States |
| Amazon Web Services | Amazon Web Services, Inc. | Emergency application hosting (standby only) | Same data as DigitalOcean, but only if we have to fail over to it. | EU | United States |
| PostHog | PostHog, Inc. | Product usage analytics | User ID, name and email, which features are used and when, session statistics, browser and device information, approximate location. | EU (Germany) | United States |
| Mailgun | Mailgun Technologies, Inc. (part of Sinch) | Transactional email: invitations, notifications, action reminders, password resets | Recipient name and email address, the content of the emails we send, and delivery records (delivered, opened, bounced). | EU (Germany) | United States (parent company in Sweden) |
| EmailOctopus | Three Hearts Digital Ltd | Email marketing | Name, email address, subscription status and sign-up date, plus opens and clicks. | EU (Ireland) | United Kingdom |
| CookieYes | CookieYes Limited, formerly Mozilor Limited | Cookie consent banner on the website | Consent records: the choice made, date, consent ID, anonymised IP address, approximate location, browser and device information. | EU | United Kingdom |
| Paddle | Paddle.com Market Limited | Merchant of record: checkout, billing, invoicing and sales tax | Buyer name, email, billing address, VAT number and transaction history. Payment card details are held by Paddle and never seen by us. | USA | United Kingdom |
| Google Analytics and Google Tag Manager | Google LLC | Website analytics | Website visitors only: cookie identifiers, pages viewed, session statistics, browser and device information, approximate location. | USA | United States |
| Intercom | Intercom, Inc. | Live chat support and in-app messages | Name, email, user ID, employer, plan and usage details, browser and device information, approximate location, chat conversations and attachments. | USA | United States |
| Cloudflare | Cloudflare, Inc. | DNS hosting and the www redirect | DNS lookups. For visits to the www address only: visitor IP address and the page requested. No account or board data. | USA (global network) | United States |
| Anthropic | Anthropic PBC | AI features, only if your workspace switches them on | The board content sent to an AI feature, such as the notes being grouped. Set up so it is not used for training. | USA | United States |
| Google Cloud AI | Google LLC | AI features, only if your workspace switches them on | The board content sent to an AI feature, such as the notes being grouped. Set up so it is not used for training. | USA | United States |
| OpenAI | OpenAI, L.L.C. | AI features, only if your workspace switches them on | The board content sent to an AI feature, such as the notes being grouped. Set up so it is not used for training. | USA | United States |
| Bunny CDN | BunnyWay d.o.o. | Content delivery for app files | Visitor IP address and the app files requested. | Global network, EU company | Slovenia |
Questions: contact@spreo.io