Legal Documents:
- Legal Hub
- Terms of Service
- Privacy & Cookie Policy
- Sub-Processors
- Cookie & Tracking Policy
Sub-Processor List
Bread & Butter IO Inc. (“we,” “us,” or “Bread & Butter”) uses a limited number of third-party service providers (“sub-processors”) to deliver the Bread & Butter platform. A sub-processor is any third party that processes personal data on our behalf in connection with the Services.
This page lists all current sub-processors, the nature of the data they process, their location, and the legal mechanism used to govern any international data transfer. We maintain this page in accordance with our obligations under the General Data Protection Regulation (GDPR) Article 28, Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), and applicable US state privacy laws.
If you are subject to the GDPR, you have the right to object to the addition of a new sub-processor. When we add a new sub-processor, we will update this page and notify customers by email at least 14 days in advance. If you wish to object, contact us at support@breadbutter.io within that notice period.
Infrastructure & Hosting
AI Models & Inference
Bread & Butter routes AI inference requests through OpenRouter, a multi-model API gateway, and directly to individual model providers. These providers process lead data, behavioural signals, professional profile data, and message content to power LeadScore AI, profile enrichment, Nurture AI, and the AI Pipeline Builder. All requests are limited to the minimum data required for the specific AI task.
| Sub-Processor | Models / Purpose | Data Processed | Location | Transfer Basis |
|---|---|---|---|---|
| OpenRouter | Multi-model AI routing and aggregation layer — routes inference requests to underlying model providers on behalf of the Platform | Lead profiles, behavioural signals, enrichment inputs, message generation prompts (minimum necessary for task) | 🇺🇸 USA | SCC |
| Anthropic | Claude Sonnet 4 — lead scoring, enrichment reasoning, nurture content generation | Lead profiles, behavioural signals, enrichment inputs, message generation prompts | 🇺🇸 USA | SCC |
| Gemini 2.5 Flash, Gemini 2.5 Pro, Gemini 3 Pro Preview, Gemini 3 Flash Preview — multi-modal reasoning, enrichment, and content tasks | Lead profiles, behavioural signals, enrichment inputs, message generation prompts | 🇺🇸 USA | SCC | |
| OpenAI | GPT-4o, GPT-4o Mini, GPT-4.1, GPT-5 Chat — lead scoring, content generation, pipeline research | Lead profiles, behavioural signals, enrichment inputs, message generation prompts | 🇺🇸 USA | SCC |
| Meta | Llama-4 Maverick, Llama-4 Scout — open-weight model inference for enrichment and scoring tasks | Lead profiles, behavioural signals, enrichment inputs | 🇺🇸 USA | SCC |
| Mistral AI | Mistral Small 3.1, Mistral Nemo 12B Celeste — European-hosted inference for enrichment and content tasks | Lead profiles, behavioural signals, enrichment inputs, message generation prompts | 🇫🇷 EU / France | Adequacy |
| Arcee AI | Virtuoso Large — specialised model for structured enrichment and lead research tasks | Lead profiles, enrichment inputs | 🇺🇸 USA | SCC |
Data Enrichment & Web Intelligence
These providers supply web data, company intelligence, and AI-powered embeddings used to enrich lead profiles and power the AI Pipeline Builder. Where personal data is submitted, it is limited to professional profile information (name, email, company, job title) used to generate enrichment results.
Sub-ProcessorPurposeData ProcessedLocationTransfer BasisBright DataWeb data collection and proxy network for public business intelligence and profile enrichmentPublicly available professional profile data, company data (no sensitive personal data submitted)🇮🇱 IsraelAdequacyJina AIAI-powered text embeddings, semantic search, and content indexing for lead and content intelligenceProfessional profile summaries, content text (no directly identifying personal data)🇩🇪 EU / GermanyAdequacyFirecrawlStructured web crawling and scraping for company and content data used in enrichment pipelinesPublicly available company and professional data🇺🇸 USASCCApifyWeb automation and data extraction for public business and professional data used in enrichmentPublicly available company and professional data🇨🇿 EU / Czech Rep.Adequacy
Analytics, Monitoring & Geolocation
| Sub-Processor | Purpose | Data Processed | Location | Transfer Basis |
|---|---|---|---|---|
| MaxMind (GeoIP2) | IP address geolocation — approximate visitor location for analytics display (see Section 9.8.4 of EULA) | IP address (no additional personal data submitted to MaxMind) | 🇺🇸 USA | SCC |
| Sentry | Application error monitoring, crash reporting, and performance tracing for the Bread & Butter Platform | Error stack traces, session identifiers, IP addresses, browser/device info associated with error events | 🇺🇸 USA | SCC |
| SolarWinds | Infrastructure and network performance monitoring | Server metrics, network logs, IP addresses (no end-user personal data submitted) | 🇺🇸 USA | SCC |
Payments & Billing
| Sub-Processor | Purpose | Data Processed | Location | Transfer Basis |
|---|---|---|---|---|
| Stripe | Subscription billing, payment processing, and invoice management for Bread & Butter accounts | Name, email address, billing address, payment method details — Bread & Butter does not store raw card data; all payment data is handled directly by Stripe | 🇺🇸 USA | SCC |
Automation & Workflow Integrations
| Sub-Processor | Purpose | Data Processed | Location | Transfer Basis |
|---|---|---|---|---|
| Calendly | Demo and onboarding meeting scheduling for Bread & Butter sales and customer success | Name, email address, company, meeting preferences (submitted by prospects and customers booking meetings with Bread & Butter) | 🇺🇸 USA | SCC |
CRM & Sales Operations
| Sub-Processor | Purpose | Data Processed | Location | Transfer Basis |
|---|
Customer Support
| Sub-Processor | Purpose | Data Processed | Location | Transfer Basis |
|---|---|---|---|---|
| Help Scout | Customer support ticketing, help documentation, and knowledge base | Name, email address, support ticket content | 🇺🇸 USA | SCC |
Development & Internal Operations
The following tools are used internally by Bread & Butter for software development, project management, and business operations. They do not process end-user Visitor Data or Customer Data from the Platform in the ordinary course of use. They are listed here for transparency.
| Sub-Processor | Purpose | Data Processed | Location | Transfer Basis |
|---|---|---|---|---|
| GitHub (Microsoft) | Source code version control and collaboration for the Bread & Butter Platform codebase | Source code, developer account details (no end-user personal data in ordinary use) | 🇺🇸 USA | N/A |
| Atlassian | Internal project management (Jira), documentation (Confluence), and team collaboration | Internal team data, project records; may incidentally contain customer contact details in support-related tickets | 🇺🇸 USA | SCC |
| Cognition Labs (Devin) | AI-assisted software development and code review tool used by the Bread & Butter engineering team | Source code (no end-user personal data in ordinary use) | 🇺🇸 USA | N/A |
| GoDaddy | Domain name registration and DNS management for breadbutter.io | Domain registration details (registrant contact info only) | 🇺🇸 USA | N/A |
| Apple (App Store) | iOS App Store distribution of the Bread & Butter mobile app | Developer account details, app metadata (no end-user personal data processed on B&B’s behalf by Apple) | 🇺🇸 USA | N/A |
Bread & Butter will provide at least 14 days’ advance notice before engaging a new sub-processor that processes personal data. Notice will be sent by email to your registered account address and this page will be updated. GDPR customers may object to new sub-processors within the notice period by contacting support@breadbutter.io.
