Brewale — Subprocessors
Last updated: June 18, 2026
Brewale engages the following subprocessors to provide the Service. Each subprocessor is bound by data-processing terms equivalent to those in our Data Processing Agreement.
Current subprocessors
| Subprocessor | Role | Data processed | Location |
|---|---|---|---|
| Hetzner Online GmbH | Application hosting | All Service data while in process | Germany (EU) |
| Scaleway SAS | Application hosting and managed PostgreSQL database | All Service data at rest and in process | France (EU) |
| Brevo (Sendinblue SAS) | Transactional and account email delivery | Email address, name, email content | France (EU) |
All current subprocessors are located within the European Union. No Standard Contractual Clauses are required for these processing activities.
Independent third parties (not subprocessors)
The following parties receive personal data as independent controllers, not as Brewale's subprocessors. Their processing is governed by their own privacy notices.
| Party | Role | Data shared | Location | Transfer mechanism |
|---|---|---|---|---|
| Polar Software Inc. | Payment processing as Merchant of Record | Name, email, billing address | United States | EU-US Data Privacy Framework and/or Standard Contractual Clauses (per Polar) |
| Google Ireland Limited | Federated sign-in (OAuth identity provider), when you choose "Sign in with Google" | Email address, name, Google account ID | Ireland (EU); may process in the United States | EU-US Data Privacy Framework and/or Standard Contractual Clauses (per Google) |
Customer-connected integrations (not subprocessors)
Integrations a Customer chooses to connect — such as GitHub, or any custom MCP endpoint the Customer configures — receive data to the Customer's own account under those providers' terms. They are not Brewale subprocessors and are not individually listed here; custom MCP endpoints are Customer-defined and cannot be enumerated. The data such an integration receives, and where it is located, depend on the Customer's configuration (for example, GitHub is located in the United States).
Changes
Brewale will provide reasonable advance notice to business Customers before adding or replacing a subprocessor that processes their personal data, so they may object on reasonable grounds. Notice is given by email to the account holder and, where applicable, by publication of an updated version of this page.
For questions about subprocessors, contact privacy@brewale.dev.