Legal
Sub-processors
Spyingbee uses the following third-party sub-processors to deliver the service. We only share the minimum data required for each.
Last updated: February 2026
| Sub-processor | Purpose | Location | Usage |
|---|---|---|---|
| Hetzner | Application hosting and database infrastructure | Germany (EU) | Core |
| Mistral AI | AI-powered signal classification, weekly briefs, and Slack Q&A responses | France (EU) | Core |
| Paddle | Payment processing, billing, merchant of record | United Kingdom | Paid plans only |
| Slack (Salesforce) | Message delivery for competitive signal notifications | United States | If enabled |
| Resend | Transactional email delivery (invitations, weekly briefs) | United States | Core |
| PostHog | Product analytics for the web app (session replay is disabled) | European Union (EU Cloud) | If analytics cookies accepted |
| Sentry | Error and performance monitoring; reports may include the user ID of the session that hit the error | United States | Core |
| Decodo | Residential proxy network used to fetch competitor pages that block datacenter traffic. Receives the target URL, never customer data. | United States | Core (crawler) |
| Google (Places API) | Retrieves public reviews and location data for tracked retail competitors. Receives the competitor place query, never customer data. | United States | Retail intelligence only |
| Google Analytics (GA4) | Marketing analytics on the public site | United States | Public marketing pages |
| LinkedIn (Insight Tag) | Advertising and conversion measurement on the public site | United States | Public marketing pages |
We evaluate the security and privacy practices of each sub-processor before onboarding. If we add or replace a sub-processor, this page will be updated accordingly.
Questions about our sub-processors? Contact us at support@spyingbee.com.