Subprocessors
Last updated: 17 September 2026 · Version: 2026-09-17.1
This page lists the third parties that Pigeoneer uses to help deliver its service, and that may process personal data in doing so. It is the list referred to in our Data Processing Agreement.
How we notify you of changes, and how to object
- This page is the current list, and every change bumps the version line above. If you are a client with a signed Data Processing Agreement, the version of the list attached to your agreement is the one that binds us to you until a change takes effect under the notice period below. This page tells you what the list is now.
- We will give clients at least fourteen (14) days' written notice by email before a new subprocessor starts processing client personal data, and prompt notice if an existing one is removed or changes materially. That is the same period as the Data Processing Agreement, which incorporates this page.
- Clients may object to a new subprocessor on reasonable data-protection grounds by emailing [email protected] within the notice period. We will work with you in good faith to offer an alternative or a workaround. If we cannot, you may terminate the affected part of the service without penalty, as set out in the Data Processing Agreement.
- We send change notices to your account contact; make sure [email protected] has a current one for your account.
The list
| Subprocessor | Purpose | Categories of data received | Processing location | DPA and transfer terms |
|---|---|---|---|---|
| Anthropic, PBC | Drafting pitch and reply emails, classifying creator channels into a type such as reviewer or let's play, classifying inbound replies, research | Creator profile data, verbatim inbound reply text, transcript text of published coverage being summarised, draft email text, client game and campaign briefing text | United States. 548 Market Street, PMB 90375, San Francisco, CA 94104 | DPA, incorporated into the commercial terms. EU standard contractual clauses, the UK addendum and a Swiss addendum included. Their subprocessors |
| Cloudflare, Inc. | Marketing site hosting, storage of early-access form submissions, anti-spam on the form, operator authentication, and network ingress for the app | Early-access form submissions, IP address to the anti-spam check, operator login identity, application traffic in transit | 101 Townsend Street, San Francisco, CA 94107, USA. Distributed data centres | DPA. EU standard contractual clauses, UK addendum, and certified under the EU-US Data Privacy Framework, its UK extension and the Swiss-US Data Privacy Framework. Contact [email protected]. Their subprocessors |
| Plus Five Five, Inc., trading as Resend | Our own service email only: verification codes to clients, and telling us when someone fills the early-access form. Never used to email creators | Client and prospect email addresses, verification codes, form submission content | 2261 Market Street #5039, San Francisco, CA 94114, USA. Customer data stored in the United States | DPA, binding automatically on signup. EU standard contractual clauses, UK addendum and Swiss adjustments included in the DPA, and Data Privacy Framework certified including the UK extension. Contact [email protected] |
Everything above was checked against each provider's own published terms on 30 August 2026 and again on 16 September 2026. Every one of them carries a data processing agreement that is already binding on us, with the European standard contractual clauses included, and a mechanism for UK and Swiss data.
Your own mail provider is not our subprocessor
Pigeoneer sends and reads mail through the SMTP and IMAP host you already contract with, using credentials you supply. That provider is your own processor under your own contract with them, not ours, and it is therefore not listed above. We do not choose it and we have no agreement with it.
Other services and sources
For completeness, these appear in the product but are not subprocessors, because none of them processes personal data on our instructions:
- Slack. We use a private Slack workspace to alert the operator when something in the system errors or behaves unexpectedly. Those alerts carry technical detail about the system, not personal data: no creator names, no handles, no email addresses and no message content. If that ever changes, Slack moves into the table above and clients are notified under the notice period.
- Local transcription tooling runs on our own hardware. Where a YouTube video has a published caption track we fetch that; otherwise, and for every Twitch stream, we download the audio and transcribe it locally. No audio or video is sent to a hosted transcription service. The resulting transcript text is sent to Anthropic when a piece of coverage is summarised, as the table says.
- YouTube and Twitch. We query their APIs with search terms (a genre, a tag, and a client's game name when looking for coverage) and with the identifiers of the public channels and videos we look up, and we fetch caption tracks and audio of published videos and streams from them. We send them no email addresses, no reply text and no other client content. They process those requests for their own purposes, not on our instructions, so they are sources we read, not subprocessors, and they are not listed above.
- Other public sources we read but do not send client or creator data to: Steam, TwitchTracker, OpenCritic, Metacritic, Google News and Bing News. We fetch publicly available pages and results from these; we do not transmit client data to them beyond the request itself.
- Our own hardware and storage. Your campaign data, the creator database and backups are held on infrastructure we operate directly, in the United States (California), rather than in a third-party marketing cloud.
No analytics
There is no analytics, telemetry, tag manager or advertising SDK in the Pigeoneer application or on the marketing site. The only cookie-capable third party the marketing site loads is the Cloudflare anti-spam widget on the signup form.
Contact
Questions about this list, or an objection to a subprocessor: [email protected]