Skip to content
Passionfruit
Book a call

Legal

Subprocessors

The third parties Passionfruit uses to deliver its services, what each one does, the data it handles and where it processes it.

Last updated

Alopay Inc., doing business as Passionfruit ("Passionfruit", "we" or "us"), uses the third parties listed below ("subprocessors") to deliver its services and run its business. The first group may process personal data on behalf of our clients, as described in our data processing agreement. The second group supports our website and business operations and does not receive data from the tools clients connect to our platform.

Our commitments

  • We review every subprocessor's security and privacy practices before we use it.
  • Each subprocessor is bound by written terms that require it to protect the data it handles, to a standard no lower than our data processing agreement.
  • No AI training on client data. We never use client data to train, fine-tune or improve any AI model, ours or anyone else's. We use AI model providers only under commercial API or enterprise terms that prohibit them from training on our inputs and outputs, and we do not enable any setting that would allow it.
  • Data stored in the United States. All client data is stored in the United States, and every subprocessor below processes it there.

How we add or change subprocessors

Before a new or replacement subprocessor starts processing client personal data, we update this page at least 30 days in advance, and change the "Last updated" date at the top. Please check this page for changes. Clients may object on reasonable data protection grounds during that period by writing to privacy@getpassionfruit.com, as set out in the data processing agreement.

Subprocessors that may process client data

Google Cloud Platform

  • Purpose: Hosting the Passionfruit platform and storing the data it collects from connected client tools.
  • Data: Client platform account details, and data from connected tools such as Search Console, Google Analytics 4 and the client's content management system.
  • Location: United States.

Vercel

  • Purpose: Hosting and delivery of the Passionfruit website and platform interface.
  • Data: Technical data such as IP address, browser and device information, and request logs. Platform pages served to logged-in client users.
  • Location: United States. Pages are delivered to visitors through Vercel's global edge network.

OpenAI

  • Purpose: AI models used by our platform to analyze client data and produce action items and reports, and to track how ChatGPT mentions client brands.
  • Data: Client search, analytics and content data needed for the analysis, and prompts about brands, products and topics. Used under API terms that prohibit training on our data.
  • Location: United States.

Anthropic

  • Purpose: AI models used by our platform to analyze client data and produce action items and reports, and to track how Claude mentions client brands.
  • Data: Client search, analytics and content data needed for the analysis, and prompts about brands, products and topics. Used under API terms that prohibit training on our data.
  • Location: United States.

Google (Gemini and Google Workspace)

  • Purpose: Gemini models used by our platform for analysis and to track how Google's AI features mention client brands. Google Workspace for email, documents and internal collaboration.
  • Data: Client search, analytics and content data needed for the analysis, and prompts about brands, products and topics. Business contact details, communications and working documents. Gemini is used under paid API terms that prohibit training on our data.
  • Location: United States.

Where a client connects its own Search Console or Google Analytics 4 property, Google processes that data under the client's own agreement with Google, and we access it through Google's APIs.

Resend

  • Purpose: Sending platform emails, such as login links and notifications.
  • Data: Names and work email addresses of client users, and the content of those emails.
  • Location: United States.

Slack

  • Purpose: Communication with clients and within the Passionfruit team.
  • Data: Names, work email addresses, and the messages and files shared.
  • Location: United States.

Fathom

  • Purpose: Recording, transcribing and summarizing calls with clients and prospects, with participants' knowledge.
  • Data: Names, email addresses, call recordings, transcripts and summaries.
  • Location: United States.

Website and business operations

These providers do not receive data from the tools clients connect to our platform.

HubSpot

  • Purpose: Managing sales contacts and inquiries from our website.
  • Data: Names, work email addresses, company details, form answers and website activity of prospects and client contacts.
  • Location: United States.

Calendly

  • Purpose: Scheduling calls booked through our website.
  • Data: Name, email address, company, booking time and the answers given in the booking form.
  • Location: United States.

RB2B

  • Purpose: Identifying the companies and business professionals who visit our website.
  • Data: Website visitor activity, IP address, and the business profile and work contact details matched to a visitor.
  • Location: United States.

Stripe

  • Purpose: Invoicing and payment processing.
  • Data: Billing contact details, company details and payment records.
  • Location: United States.

Brex

  • Purpose: Business banking and payments.
  • Data: Company details and payment records for clients and vendors.
  • Location: United States.

Contact

Questions about our subprocessors can be sent to privacy@getpassionfruit.com.