Service Providers
These providers process personal data on our behalf or as independent controllers in connection with Bloom and bloomcreator.app. We will update this page before adding or replacing a provider. Details on purposes and legal bases: Privacy Policy.
| Provider | Role | Purpose / data | Location | Transfer safeguard |
|---|---|---|---|---|
| Vercel Inc. | Processor | Hosting of the website and Bloom server, AI request routing (Vercel AI Gateway), logs; request data, AI content in transit, IP address, log metadata | Server functions: USA (Washington, D.C., iad1); website: global edge network | Data processing agreement with Standard Contractual Clauses and/or EU-US Data Privacy Framework, as offered by the provider |
| Google (Gemini API, accessed via Vercel AI Gateway) | Service provider for online AI | Content you send to online AI and the AI output | Not restricted to a region (USA and other countries) | Provider data-processing terms with Standard Contractual Clauses and/or Data Privacy Framework, as offered by the provider |
| Upstash, Inc. | Processor | Account, session, security and allowance records; temporary copies of AI results | EU – Frankfurt, Germany | Data stored in the EU; contractual safeguards for any access from outside the EU |
| Langfuse | Processor | AI operations monitoring: account pseudonym, request and performance metadata (no prompt or response text) | EU | Data stored in the EU |
| Sentry (Functional Software, Inc.) | Processor | Server error and performance diagnostics | EU data region | Data stored in the EU; contractual safeguards for any access from outside the EU |
| RevenueCat, Inc. | Processor | Purchase verification, restore, subscription analytics; pseudonymous identifiers | USA | Data processing agreement with Standard Contractual Clauses and/or Data Privacy Framework, as offered by the provider |
| Google Workspace | Processor | Support mailbox only: support emails and attachments | Google data centres (USA and other countries) | Google Cloud Data Processing Addendum with Standard Contractual Clauses / EU-US Data Privacy Framework |
| Cloudflare, Inc. | DNS provider | Domain name resolution only; no proxying and no access to website traffic | Global | — |
| Apple Inc. / Apple Distribution International | Independent controller | Sign in with Apple, App Attest, App Store purchases, iCloud | Per Apple’s terms | Apple’s privacy terms |
Not used: advertising or third-party analytics SDKs (apart from RevenueCat subscription analytics), push-notification services, or marketing email services.
Questions or requests for copies of safeguards: support@bloomcreator.app.