Subprocessors · Crumb

To provide Crumb Cloud (the hosted Service at crumb-app.localhostlabs.net), we rely on the vetted third-party providers below. Each acts as our subprocessor under a contract with data-protection terms, processing personal data only to deliver its part of the Service. This list supplements our Privacy Policy and the sub-processing terms in our Data Processing Addendum.

The self-hosted Community edition uses none of these by default — you run Crumb on your own infrastructure and choose your own providers, so this page does not apply to self-hosters.

Current subprocessors

Provider	Purpose	Processing location
Hostinger	VPS hosting — runs the application server and PostgreSQL database where your workspace data lives	EU / United States
Cloudflare	DNS, TLS, CDN, and the secure tunnel that fronts the application; bot and abuse protection	Global (edge)
Stripe	Payment processing and subscription billing; stores card details (we never receive full card numbers)	United States
Resend	Transactional email delivery — magic-link sign-in, notifications, and the close-the-loop replies	United States
PostHog	Product analytics for this marketing site and the app (consent-gated; see the Cookie Policy)	United States

AI runs on our own infrastructure — no third-party AI subprocessor. Crumb's AI features (initiative clustering, AI-drafted tickets, session summaries, and Ask) run on machine-learning models we operate ourselves. Your feedback is not sent to any third-party AI provider and never leaves our servers, so there is no AI subprocessor to list. AI features only run on a plan that includes them and when triggered, and output is best-effort and reviewed before use. Session-replay capture is off unless a workspace explicitly enables it, and it masks inputs and blocks password and email fields at the source.

Changes & notice

We keep this page current. Where required by our DPA, customers with an active subscription will be notified of a new or replacement subprocessor before it begins processing their personal data, with a reasonable opportunity to object on legitimate data-protection grounds.

Questions

For questions about our subprocessors, or to request notice of changes, contact [email protected].