Last Revised: July 23, 2026
This is a complete list of all third-party sub-processors that Timeglass uses to provide our services and process personal data on behalf of our users. We maintain this list in accordance with GDPR Article 28 and are committed to transparency regarding our data processing partners.
Sub-Processor List
| Service Provider | Purpose | Data Types | Legal Basis |
|---|---|---|---|
| Customer.io | Email notifications and customer engagement | Email, user activity data | Contract (Legitimate Interest) |
| Google Analytics | Website analytics and usage tracking | Browsing behavior, device info, IP address | Legitimate Interest |
| Google Ads | Website ad conversion measurement and campaign attribution | Browsing behavior, device info, IP address, campaign identifiers | Consent |
| Microsoft Clarity | Session recording and user behavior analysis | Session recordings, interaction data | Legitimate Interest |
| PostHog | Product analytics and session recording | Product usage events, session recordings, user and workspace identifiers, email, device info, IP address | Legitimate Interest |
| Meta Pixel | Website ad conversion measurement and campaign attribution | Browsing behavior, device info, IP address, campaign identifiers | Consent |
| LinkedIn Insight Tag | Website ad conversion measurement and campaign attribution | Browsing behavior, device info, IP address, campaign identifiers | Consent |
| Reddit Pixel | Website ad conversion measurement and campaign attribution | Browsing behavior, device info, IP address, campaign identifiers | Consent |
| beehiiv Ad Network Pixel | Newsletter ad conversion measurement and campaign attribution | Browsing behavior, device info, IP address, campaign identifiers | Consent |
| HubSpot | Internal CRM for sales and customer management | Company info, business contacts | Legitimate Interest |
| Clerk | Authentication and user identity management | Email, user credentials, authentication data | Contract |
| Supabase | Database and backend infrastructure | All application data | Contract |
| RB2B | B2B visitor identification and lead generation | Business contact information, company data | Legitimate Interest (Opt-in for EU) |
| Apollo | Sales intelligence and prospecting data | Business contact information, company data | Legitimate Interest (Opt-in for EU) |
| Resend | Transactional email delivery | Email address, notification content | Contract |
| Google Cloud Platform | Cloud hosting and storage of captured data | Screenshots, activity data | Contract |
| Google Gemini (Vertex AI) | AI transcription and analysis of meeting audio; timesheet generation | Meeting audio, activity data | Contract |
| OpenRouter | AI inference routing, restricted to zero-data-retention endpoints | Screenshot images, activity text (content not retained) | Contract |
| Morph (AutoInfra, Inc.) | AI inference host via OpenRouter (OpenRouter-verified zero-data-retention endpoint) | Screenshot images, activity text (content not retained) | Contract |
| Parasail | AI inference host (zero data retention) | Screenshot images, activity text (content not retained) | Contract |
| Weights & Biases | AI inference host (zero data retention) | Screenshot images, activity text (content not retained) | Contract |
| OpenAI | Optional workspace AI assistant | Chat messages, workspace context | Contract |
| Groq | Legacy AI text inference being phased out (zero data retention; no images; not in active use) | Query text | Contract |
| Stripe | Payment processing | Payment information, transaction data | Contract |
Data Transfers
Most of our sub-processors are located in the United States. For processors outside the EU/EEA, Timeglass relies on Standard Contractual Clauses (SCCs), adequacy decisions, or explicit opt-in consent where applicable to ensure adequate safeguards for personal data transfers.
Changes to Sub-Processors
Timeglass may add or change sub-processors from time to time. We will provide notice of material changes to this list at least 30 days in advance when possible. You may object to the use of new sub-processors by contacting us at privacy@timeglass.ai.
Sub-Processor Agreements
All of our sub-processors are contractually bound by Data Processing Agreements that require them to:
- Process personal data only on our instructions
- Implement appropriate technical and organizational security measures
- Assist with data subject rights requests
- Assist with compliance obligations
- Delete or return personal data upon request
- Permit audits and inspections
Contact & Inquiries
For questions about our sub-processors, data transfers, or to request changes to this list, please contact our Privacy Team at privacy@timeglass.ai.