Sub-processors
Last updated: October 5, 2026
To deliver the FounderMCP service we rely on a limited number of third-party providers ("sub-processors") that process personal data on our behalf. The current list is shown below. When we add a new sub-processor, we notify all organization owners by email at least 30 days in advance.
| Sub-processor | Function | Data processed | Location |
|---|---|---|---|
| Supabase | Database hosting, authentication and file storage | Account data, leads, messages and organization data | EU (Ireland) |
| Railway | Application hosting | All data the application processes | EU and United States |
| OpenAI | AI for the chat, lead finding, message drafting and relevance checks | Text you type, company context, and professional details needed for that task | United States |
| HarvestAPI | Public professional profiles, posts and people search used to find leads | Search criteria, and the public profile, post and company data returned | See the provider (Aventra Technologies Limited) |
| SignalHire | Profile enrichment and contact lookup when you ask | Name, company, job title and professional profile URL | EU (Poland) |
| TheirStack | Companies and the technologies they use | Company and job-post data used to find those companies | EU (Spain) |
| PredictLeads | Company news events used by signals | Company names and the news events returned | EU (Slovenia) |
| Fundable | Recently announced company funding rounds | Company name, country and funding round | See the provider |
| StartupMap | Company funding history | Company name, country and stage | See the provider |
| Unipile | Connecting your LinkedIn and email accounts to send outreach | Messages and the connected account | EU (France) |
| Lusha | Work-email lookup when you ask to find an email for a person | Name, company and professional profile URL | United States and Israel |
| Stripe | Payment processing | Billing details, payment method and transactions | EU (Ireland) and United States |
| Resend | Transactional and billing email | Email address and the content of the email | EU (Ireland) |
| Loops | Product and lifecycle email | Your name, email address and product-usage state | United States |
| PostHog | Product analytics | Pseudonymous usage events, without message content | EU (Germany) |
| Crisp | Customer support chat | Name, email address and the support conversation | EU (Netherlands) |
| Cloudflare | Web analytics | Page views and IP address. The beacon does not set a cookie | United States |
| Tag Manager and the measurement tags it loads | Pseudonymous usage and measurement data | United States |
If you connect HubSpot or another system of your own, we share with that provider only the records needed for what you ask. For providers outside the EU, transfers rely on the provider's own safeguards (such as Standard Contractual Clauses). See our Privacy Policy for more details.