Skip to main content
Draft, not yet in force. This document is being reviewed and will change before it applies to anyone. Last updated: 4 October 2026.
These are the outside companies that handle personal data for us to run Brand Atlas. Each handles only what it needs for the job listed. [TEAM TO CONFIRM: whether Campaigner, our newsletter tool, belongs on this list once the newsletter list is connected to it.]

Not on this list, and why

  • Your own AI providers. If you add your own OpenAI or Google Gemini key for Henry, or connect your own AI app through the Atlas MCP, that provider works for you, under your agreement with them. See the AI terms.
  • Google Fonts, while you preview. When you preview a Google font in the font picker, your browser loads it from Google directly. Once you publish, we serve the font ourselves.
  • Analytics. We have no outside analytics tool. Usage is recorded in our own database, at Supabase.
  • Uptime checks. Two services check that Brand Atlas is up. They receive no personal data.

How we choose them

Before we use a provider, we check its security and its data protection terms, and we have a data processing agreement with each one. [TEAM TO CONFIRM: that a data processing agreement is in place with every provider listed.]

Hearing about changes

We update this page before a new provider starts handling personal data, and tell account owners at least 30 days ahead by email. If you have a data protection reason to object to a new provider, write to [TEAM TO CONFIRM: privacy contact email] within those 30 days.

Changes

  • 4 October 2026: first draft.