Subprocessors
Last updated: August 2026
This page identifies the third parties engaged by Mighty Bear Games Pte. Ltd. to process Personal Data on behalf of Customers in connection with the SecretSauce Services. Capitalised terms have the meanings given in the Data Processing Addendum.
A provider receives Personal Data only where its service is used for the relevant customer, account, feature or workflow. Processing locations may include remote access and onward processing by the provider’s authorised subprocessors under applicable contractual safeguards.
Current Subprocessors
| Subprocessor | Service and processing purpose | Processing locations | Personal Data processed |
|---|---|---|---|
| Vercel Inc. | Application hosting, serverless execution, network delivery, performance monitoring, workflow execution, bot protection and AI Gateway routing. | United States, Singapore, United Kingdom, Brazil and South Africa, plus locations used by Vercel subprocessors. | Customer Content, account and organisation identifiers, prompts and Outputs routed through AI Gateway, usage data, logs and network data. |
| Supabase Pte. Ltd. | Managed database and object storage. | The configured Supabase project region and locations used by Supabase subprocessors. | Customer Content, Outputs, account and organisation data, configuration, audit, billing and usage records. |
| Upstash, Inc. | Managed Redis, rate limiting, concurrency controls and deferred job delivery. | United States and selected cloud regions. | Identifiers, signed asset URLs and storage paths, job metadata, rate-limit data and limited operational payloads. |
| PostHog, Inc. | Product analytics, error monitoring and AI observability. | United States. | Account, organisation, member and session identifiers, device and usage events, attribution, error data, billing events and AI interaction telemetry, which may include prompts and Outputs. |
| Dub Technologies, Inc. | Referral and affiliate attribution. | United States and locations used by Dub subprocessors. | Referral and click identifiers, customer name and email, external customer identifiers, conversion events and transaction attribution data. |
| Sleeknote ApS | Consent-gated website lead generation and visitor interactions. | European Union and locations used by Sleeknote subprocessors. | Browser and visitor data, lead-generation interactions and information a visitor submits through a Sleeknote form. |
| GitHub, Inc. | Hosted workflow execution for approved offline production analysis and maintenance tasks. | United States and locations used by GitHub subprocessors. | Compacted chat or session data, organisation and request context, workflow logs and short-lived report artifacts. |
| Stytch, Inc. | Authentication, identity management and session security. | United States and locations used by Stytch subprocessors. | Name, email address, organisation membership, authentication, role and session data. |
| Stripe, Inc. | Subscription billing and payment processing. | Global, including the United States. | Billing contact details, names, addresses, transaction and subscription data, tax data and payment identifiers. SecretSauce does not store full payment card details. |
| Anthropic, PBC | Generative AI model inference for supported text and multimodal features. | United States and locations used by Anthropic subprocessors. | Prompts, conversation context, instructions, tool results, Customer Content and Outputs required for inference. |
| OpenAI, L.L.C. | Generative AI model inference for supported utility, translation and safety evaluation features. | United States and locations used by OpenAI subprocessors. | Prompts, instructions, Customer Content and Outputs required for inference. |
| Google LLC | Vertex AI model inference, media analysis and customer-directed Google Drive file retrieval. | Global. Model inference uses the configured Google Cloud location, including global endpoints where configured. | Prompts, uploaded images and video, Customer Content, Outputs and customer-selected Google Drive files. |
| FAL.AI, Inc. | Image, video and audio generation and processing. | United States and locations used by fal.ai subprocessors. | Prompts, reference assets, signed URLs, generated media, voice samples, callback identifiers and generation metadata. |
| BytePlus Pte. Ltd. | AI model, image and video inference through ModelArk. | Singapore and Asia Pacific infrastructure. | Prompts, reference assets, generated media and inference metadata. |
| Alibaba Cloud (Singapore) Private Limited | AI model inference through the international DashScope service. | Singapore and international service infrastructure. | Prompts, video URLs, Customer Content, Outputs and inference metadata. |
| BRIA Artificial Intelligence Ltd. | Image processing, including background removal. | Provider-managed infrastructure and locations described in BRIA contractual documentation. | Customer-supplied and generated images, image URLs and processing metadata. |
| TYTN LIMITED (trading as Doubleword) | Approved offline classification and analysis of customer sessions. | United Kingdom and locations used by Doubleword subprocessors. | Compacted chat or session traces, organisation and request context, and generated classification results. |
| E2B, Inc. | Isolated cloud sandboxes for supported rendering, conversion and agent workflows. | United States and locations used by E2B subprocessors. | Files, media, code, prompts, session identifiers, Outputs and job metadata required for the requested sandbox task. |
| Mendable, Inc. (Firecrawl) | Website retrieval, crawling and extraction for supported web-based features. | United States and locations used by Firecrawl subprocessors. | Customer-supplied URLs, retrieved website content, crawl parameters, extraction instructions and results. |
| Apify Technologies s.r.o. | Website and social-content retrieval for supported research and import features. | European Union, United States and locations used by Apify subprocessors. | Profile URLs, usernames, hashtags, search queries, publicly available source content, extraction instructions and results. |
| Help Scout PBC | Customer support, product feedback and support case management. | United States and locations used by Help Scout subprocessors. | Contact details, support communications, linked session or brand identifiers, screenshots, attachments and case metadata. |
| Slack Technologies, LLC | Operational, security, abuse and billing notifications. | Global, including the United States. | Organisation names and identifiers, account and billing context, attribution, cancellation reasons and operational alert details. |
Changes and notice
The Company will provide notice of an intended addition or replacement of a Subprocessor at least fifteen (15) days before the change takes effect. A Customer may object on reasonable data-protection grounds within fifteen (15) days after receiving notice by emailing privacy@trysecretsauce.ai, in accordance with Clause 6.3 of the Data Processing Addendum.
Change history
| Effective date | Change |
|---|---|
| August 2026 | Initial verified list published. |