Fixback
Docs Sign in Start free

Legal

Subprocessors

Last updated

These are the service providers Fixback uses to process Customer Data on our customers' behalf. Each processes it only to provide its service to us, under a written agreement with data-protection terms at least as protective as our Data Processing Agreement.

Fixback itself runs on servers Wemuda ApS operates at its offices in Copenhagen, Denmark, in the European Union: the application, its database, and the storage that holds Evidence such as screenshots, replays and narration audio. That hosting is our own, so it is not on this list.

1. Subprocessors

NamePurposeDataLocation
StripePayments: subscriptions, invoices, card payments and tax calculation.Billing contact and address, tax ID, payment card details (held by Stripe; Fixback never stores card numbers), invoice history.Ireland and the United States
Twilio SendGridTransactional email: sign-in links, invitations, Issue alerts and billing notices.Recipient email addresses and the email's content, such as an Issue's title and summary in an alert.United States
AssemblyAISpeech-to-text for Walkthrough narration, on its EU endpoint. It does not train on the audio.Narration audio and its transcript. AssemblyAI deletes the audio within 48 hours, and Fixback deletes AssemblyAI's transcript once it has stored its own.European Union
VercelAI Gateway: routes the model calls that write Briefs, label Issues and cut Walkthroughs. Sandbox: the isolated virtual machine a hosted Run works in.The Evidence and text sent to a model for analysis. For a hosted Run, a clone of the connected repository and the Issue's Brief.United States
AnthropicThe AI models that write Briefs and carry out hosted Runs.What a model is given: an Issue's Evidence and Brief, and for a hosted Run the repository code the agent reads.United States
GitHubRepository connection through the Fixback GitHub App: reading code for analysis and Runs, and opening pull requests.Repository contents the App can access, and the branches and pull requests a Run creates.United States

The models that write Briefs and carry out hosted Runs are Anthropic's, reached through Vercel's AI Gateway and Anthropic's API. If we move that work to another model provider, it joins this list first, with the notice below.

2. Identity providers you choose

You can sign in with a link we email you, or with one of these providers instead. They are not our subprocessors: you choose one, and it shares your profile with us under its own privacy policy.

ProviderWhat it shares with Fixback
GoogleYour Google account's name, email address and profile picture, when you sign in with Google.
GitHubYour GitHub account's name, email address and avatar, when you sign in with GitHub.
AppleYour name and email address (or Apple's relay address), when you sign in with Apple, where it is offered.

3. Changes to this list

We announce a new or replacement subprocessor at least 30 days before it processes Customer Data: we update this page and its date, and email the Owners of each workspace. A customer may object on reasonable data-protection grounds, as the Data Processing Agreement sets out. Questions: support@fixback.dev.