Subprocessors
Last updated: 26 July 2026
The third parties Tiny Cloud Ventures uses to operate HeyBob, what each does, and the customer data it may process. This is the current named list referenced in our Privacy Policy and your data processing addendum.
Bob's use of Anthropic's models runs on our own commercial account; this is not
a bring-your-own-key arrangement. Customer prompts, connected-tool content, and
workspace memory are not used to train any AI model.
| Subprocessor | Purpose | Data it may process | Location |
|---|---|---|---|
| DigitalOcean, LLC | Cloud hosting and managed PostgreSQL database | All workspace data, run history, audit logs, and workspace memory at rest | United States |
| Anthropic, PBC | AI model provider (Claude) that powers Bob's reasoning | The prompts and connected-tool content sent to complete a requested run, and the model's outputs | United States |
| Stripe, Inc. | Payments and subscription billing | Billing contact and payment method details | United States |
| Pipedream | Hosted connection auth (OAuth and API keys) and tool execution for the apps you connect | Credentials for the third-party apps you connect (held by Pipedream, never by Bob), and the specific tool inputs/outputs of an action you ask Bob to run | United States |
| Voyage AI | Text embeddings for workspace memory retrieval | The text of memory items and messages embedded so Bob can recall relevant context | United States |
| Twilio SendGrid | Inbound email intake (Inbound Parse) | Email sent to a workspace's Bob address, including subject, body, and attachments | United States |
| Aptabase | Privacy-first website and install analytics | Anonymous, cookieless usage events on heybob.ai; no personal identifiers, no cross-site tracking | United States |
| PostHog | Website product analytics and conversion funnels | Usage events on heybob.ai (pages viewed, links and buttons clicked) tied to a first-party analytics identifier stored in your browser; no cookies, no cross-site tracking, no session recording | United States |
Changes
We update this list when we add, remove, or change a subprocessor. Questions, or a request for advance notice of changes, go to [email protected].
23 July 2026: Nango was removed as a subprocessor. Connection auth for the apps you connect consolidated onto a single provider; the Nango service was decommissioned and no customer data remains with it.