Legal
Subprocessor List
1. Introduction
This Subprocessor List names the third-party service providers (subprocessors) that Hello Alice uses to deliver our Services. We name our subprocessors here so that users, partners, and reviewers can see who has access to which categories of information and how each one fits into our platform.
"Hello Alice," "we," "us," and "our" refer to Circular Board, Inc., a Delaware corporation doing business as Hello Alice.
This list is part of our Privacy Policy disclosure. See our Privacy Policy for the full description of how we handle personal information, including the categories of information we share with subprocessors and the safeguards we apply.
2. What is a subprocessor
A subprocessor is a third party that processes personal information on our behalf to help us deliver the Services. Subprocessors are bound by written agreements that require them to protect the information we share with them and to use it only for the purposes we have authorized.
Some of the vendors below process information primarily about Hello Alice itself (for example, our cloud infrastructure provider) and only incidentally touch user personal information. Others (such as our email service provider) handle user personal information directly. We list all of them here for transparency.
3. How we notify you of changes
We may add, change, or remove subprocessors as our Services evolve. When we make changes:
- We update this list and the "Last Updated" date at the top of the page.
- For material changes (such as adding a subprocessor that processes a significant new category of personal information), we provide additional notice as described in our Privacy Policy.
If you would like to be notified of changes to this list, contact us at compliance@helloalice.com and we will add you to a notification list when changes are published.
4. Our subprocessors
The table below names the subprocessors Hello Alice currently uses, the function each provides, the categories of personal information each may process, and where the vendor's own privacy or security information can be found.
Core infrastructure
| Subprocessor | Function | Information processed | Processing location | Vendor information |
|---|---|---|---|---|
| Amazon Web Services (AWS) | Cloud hosting for AI and data services, including Amazon Bedrock for AI model access | All categories of personal information stored or processed by Hello Alice | United States | AWS Privacy |
| Vercel | Front-end hosting for helloalice.com and app.helloalice.com | Limited to information transmitted to or rendered on Hello Alice's front-end surfaces | United States (us-east-1, us-east-2) | Vercel Privacy |
AI and machine learning
| Subprocessor | Function | Information processed | Processing location | Vendor information |
|---|---|---|---|---|
| Anthropic (via AWS Bedrock) | Large language models that power the AI advisor | AI advisor prompts and responses, including user-provided context, processed within the AWS Bedrock environment. Anthropic does not receive data outside Bedrock and does not train on Bedrock-mediated conversations. | United States (AWS Bedrock) | Anthropic Privacy |
| Langfuse | LLM observability and monitoring of AI advisor performance | AI advisor traces and performance data, which may include user prompts and responses for diagnostic purposes | United States (us.cloud.langfuse.com) | Langfuse Privacy |
Authentication and identity
| Subprocessor | Function | Information processed | Processing location | Vendor information |
|---|---|---|---|---|
| Auth0 (Okta) | User authentication, single sign-on, multi-factor authentication | Authentication credentials, session data, login activity, MFA enrollment data | United States | Auth0 Privacy |
Payments
| Subprocessor | Function | Information processed | Processing location | Vendor information |
|---|---|---|---|---|
| Stripe | Payment processing for premium subscription (launching September 2026) | Payment card information, billing address, transaction history | United States | Stripe Privacy |
Email and customer data
| Subprocessor | Function | Information processed | Processing location | Vendor information |
|---|---|---|---|---|
| Segment | Customer data platform; routes product analytics events between Hello Alice and our analytics tools | Account identifiers, product usage events, attributes used for segmentation | United States | Segment Privacy |
| Salesforce Marketing Cloud | Email service provider for marketing, lifecycle, and transactional communications | Name, email address, communication preferences, engagement data (opens, clicks, opt-outs) | United States (Americas instance) | Salesforce Privacy |
Analytics and product measurement
| Subprocessor | Function | Information processed | Processing location | Vendor information |
|---|---|---|---|---|
| Amplitude | Product analytics | Pseudonymous user identifiers, product events and properties | United States | Amplitude Privacy |
| Google Analytics (GA4) | Web analytics for marketing site | Pseudonymous identifiers, page view data, referrer information | United States | Google Privacy |
| Fullstory | Session insights for product improvement and support diagnostics | Session playback data; sensitive form fields are excluded from capture | United States | Fullstory Privacy |
| HubSpot | Marketing automation and CRM | Name, email, marketing engagement, business attributes | United States | HubSpot Privacy |
Advertising and conversion tracking
| Subprocessor | Function | Information processed | Processing location | Vendor information |
|---|---|---|---|---|
| Google Ads | Advertising performance measurement | Pseudonymous conversion identifiers | United States | Google Privacy |
| Meta (Facebook) | Advertising performance measurement on Meta platforms | Pseudonymous conversion identifiers (Pixel events) | United States | Meta Privacy |
Engagement and events
| Subprocessor | Function | Information processed | Processing location | Vendor information |
|---|---|---|---|---|
| Zoom | Event delivery for webinars, conferences, and similar virtual events | Name, email, event registration and attendance data | United States | Zoom Privacy |
| Circle | Community platform that hosts the general Hello Alice community and accelerator program communities, including some accelerator learning curriculum | Name, profile information, business information, community posts and replies, learning progress, and engagement data for users who participate in the Hello Alice community or in accelerator programs | United States | Circle Privacy |
Security
| Subprocessor | Function | Information processed | Processing location | Vendor information |
|---|---|---|---|---|
| Breachlock | Independent penetration testing of Hello Alice's environment, conducted at least annually | Limited to test artifacts during scheduled engagements. Breachlock does not process user personal information in normal operations. | United States | Breachlock Trust |
5. Important context
Information from connected services
When you authorize Hello Alice or the AI advisor to connect to a third-party service of your own (such as a bank, accounting platform, or sales tool), that service is not a Hello Alice subprocessor. It is a third party you have chosen to connect, and its handling of your information is governed by its own terms and privacy policy. See Section 6 of our Privacy Policy for more on third-party services.
Grant program partners
When you participate in a grant program, accelerator program, or similar offering, the program funder may receive information about you in connection with administering the program. Grant program partners are governed by our Data Processing Agreement rather than this Subprocessor List. See Section 5.2 of our Privacy Policy.
Paid data access partners
Partners who pay for access to user data under our Data Processing Agreement Exhibit B are independent controllers of the information they receive, not Hello Alice subprocessors. See Section 5.3 of our Privacy Policy for details, including your right to opt out.
6. Updates to this list
We will keep this list current as our vendor relationships change. The "Last Updated" date at the top of this page reflects the most recent change.
7. Change log
This appendix logs notable updates to this Subprocessor List.
Version effective June 5, 2026
Initial publication of Hello Alice's Subprocessor List. Names the vendors currently used to deliver the Services, organized by function.
Contact
Questions about this list?
Email compliance@helloalice.com to ask about this Subprocessor List or to be notified of changes.
For our full contact details, see Section 14 of our Privacy Policy.