Subprocessors
These are the companies that help us run Gran Minerva and may process personal data for us. Each one is bound by a written agreement that protects your data. Your data is stored in the United States.
Last reviewed: October 3, 2026. We update this page at least 30 days before a new subprocessor starts handling customer personal data.
Subscribe for change notifications: privacy@granminerva.com
Infrastructure and AI
| Provider | Purpose | Data Types | Region(s) | Privacy |
|---|---|---|---|---|
| Google Cloud | Hosting and computing (Cloud Run, Cloud Functions), databases and storage (Firestore, Cloud Storage, BigQuery), encryption keys (Cloud KMS), personal-data detection and tokenization (Sensitive Data Protection), secrets, logging and monitoring | All data you put into Gran Minerva | United States (us-central1, with backup copies in other US regions) | Policy |
| Google Cloud: Vertex AI | Runs the AI models behind the assistant, file sorting and risk detection: Google Gemini models, and Anthropic Claude models served by Google | The question you ask and the data needed to answer it. Google does not use it to train its models. | United States | Policy |
| Google Cloud: Natural Language API | Reads the tone (sentiment) of text such as support notes and emails you upload | Text snippets | Google's global service (may be processed outside the US) | Policy |
| Google Firebase | Sign-in, app hosting, and handing email to our email provider | Login email and sign-in records | United States | Policy |
| Google reCAPTCHA / App Check | Stops bots and abuse on signup and in the app | Device and browser signals, IP address | Global | Policy |
Email, payments and messages
| Provider | Purpose | Data Types | Region(s) | Privacy |
|---|---|---|---|---|
| Resend | Sends our emails: sign-in links, alerts, digests and support replies | Recipient name and email, email content, delivery records | United States | Policy |
| Stripe | Payments for credit packs | Billing contact email, company and payment details (card details go straight to Stripe; we never see them) | Global | Policy |
| Twilio | Text-message alerts, only if you turn them on. Not available yet. | Phone number and alert text | Global | Policy |
Running the business
| Provider | Purpose | Data Types | Region(s) | Privacy |
|---|---|---|---|---|
| Google Workspace | Our support@ and info@ inboxes | What you email us | United States | Policy |
| Notion | Keeps track of signups and sales conversations | Name, work email, company, country, and any message you send through our contact form | United States | Policy |
| GitHub | Tracks support requests | Your name, email and the details of your support request | United States | Policy |
| Slack | Tells our team about new sales inquiries | Name, company and contact details of the person asking | United States | Policy |
Services you connect yourself
When you connect your own account at another service, such as Amazon S3, an SFTP server, Google Drive or Sheets, Box, Dropbox, Microsoft OneDrive, Salesforce, HubSpot, or QuickBooks Online (Minerva Cash), data moves between Gran Minerva and that service because you asked it to. Those services act for you under your own agreement with them, so they are not our subprocessors. Our AI disclosure explains how we use AI.
Website analytics (Google Analytics and PostHog) are switched off today. If we turn them on, they load only after you accept analytics cookies, and we will add them to this list first.
Questions about data handling?
We keep deprecated and aspirational vendors out of this list. For security reviews or data-processing questions, contact our privacy team.