Legal

Subprocessor List

Last updated: June 5, 2026

1. Introduction

This Subprocessor List names the third-party service providers (subprocessors) that Hello Alice uses to deliver our Services. We name our subprocessors here so that users, partners, and reviewers can see who has access to which categories of information and how each one fits into our platform.

"Hello Alice," "we," "us," and "our" refer to Circular Board, Inc., a Delaware corporation doing business as Hello Alice.

This list is part of our Privacy Policy disclosure. See our Privacy Policy for the full description of how we handle personal information, including the categories of information we share with subprocessors and the safeguards we apply.

2. What is a subprocessor

A subprocessor is a third party that processes personal information on our behalf to help us deliver the Services. Subprocessors are bound by written agreements that require them to protect the information we share with them and to use it only for the purposes we have authorized.

Some of the vendors below process information primarily about Hello Alice itself (for example, our cloud infrastructure provider) and only incidentally touch user personal information. Others (such as our email service provider) handle user personal information directly. We list all of them here for transparency.

3. How we notify you of changes

We may add, change, or remove subprocessors as our Services evolve. When we make changes:

  • We update this list and the "Last Updated" date at the top of the page.
  • For material changes (such as adding a subprocessor that processes a significant new category of personal information), we provide additional notice as described in our Privacy Policy.

If you would like to be notified of changes to this list, contact us at compliance@helloalice.com and we will add you to a notification list when changes are published.

4. Our subprocessors

The table below names the subprocessors Hello Alice currently uses, the function each provides, the categories of personal information each may process, and where the vendor's own privacy or security information can be found.

Core infrastructure

Subprocessor Function Information processed Processing location Vendor information
Amazon Web Services (AWS) Cloud hosting for AI and data services, including Amazon Bedrock for AI model access All categories of personal information stored or processed by Hello Alice United States AWS Privacy
Vercel Front-end hosting for helloalice.com and app.helloalice.com Limited to information transmitted to or rendered on Hello Alice's front-end surfaces United States (us-east-1, us-east-2) Vercel Privacy

AI and machine learning

Subprocessor Function Information processed Processing location Vendor information
Anthropic (via AWS Bedrock) Large language models that power the AI advisor AI advisor prompts and responses, including user-provided context, processed within the AWS Bedrock environment. Anthropic does not receive data outside Bedrock and does not train on Bedrock-mediated conversations. United States (AWS Bedrock) Anthropic Privacy
Langfuse LLM observability and monitoring of AI advisor performance AI advisor traces and performance data, which may include user prompts and responses for diagnostic purposes United States (us.cloud.langfuse.com) Langfuse Privacy

Authentication and identity

Subprocessor Function Information processed Processing location Vendor information
Auth0 (Okta) User authentication, single sign-on, multi-factor authentication Authentication credentials, session data, login activity, MFA enrollment data United States Auth0 Privacy

Payments

Subprocessor Function Information processed Processing location Vendor information
Stripe Payment processing for premium subscription (launching September 2026) Payment card information, billing address, transaction history United States Stripe Privacy

Email and customer data

Subprocessor Function Information processed Processing location Vendor information
Segment Customer data platform; routes product analytics events between Hello Alice and our analytics tools Account identifiers, product usage events, attributes used for segmentation United States Segment Privacy
Salesforce Marketing Cloud Email service provider for marketing, lifecycle, and transactional communications Name, email address, communication preferences, engagement data (opens, clicks, opt-outs) United States (Americas instance) Salesforce Privacy

Analytics and product measurement

Subprocessor Function Information processed Processing location Vendor information
Amplitude Product analytics Pseudonymous user identifiers, product events and properties United States Amplitude Privacy
Google Analytics (GA4) Web analytics for marketing site Pseudonymous identifiers, page view data, referrer information United States Google Privacy
Fullstory Session insights for product improvement and support diagnostics Session playback data; sensitive form fields are excluded from capture United States Fullstory Privacy
HubSpot Marketing automation and CRM Name, email, marketing engagement, business attributes United States HubSpot Privacy

Advertising and conversion tracking

Subprocessor Function Information processed Processing location Vendor information
Google Ads Advertising performance measurement Pseudonymous conversion identifiers United States Google Privacy
Meta (Facebook) Advertising performance measurement on Meta platforms Pseudonymous conversion identifiers (Pixel events) United States Meta Privacy

Engagement and events

Subprocessor Function Information processed Processing location Vendor information
Zoom Event delivery for webinars, conferences, and similar virtual events Name, email, event registration and attendance data United States Zoom Privacy
Circle Community platform that hosts the general Hello Alice community and accelerator program communities, including some accelerator learning curriculum Name, profile information, business information, community posts and replies, learning progress, and engagement data for users who participate in the Hello Alice community or in accelerator programs United States Circle Privacy

Security

Subprocessor Function Information processed Processing location Vendor information
Breachlock Independent penetration testing of Hello Alice's environment, conducted at least annually Limited to test artifacts during scheduled engagements. Breachlock does not process user personal information in normal operations. United States Breachlock Trust

5. Important context

Information from connected services

When you authorize Hello Alice or the AI advisor to connect to a third-party service of your own (such as a bank, accounting platform, or sales tool), that service is not a Hello Alice subprocessor. It is a third party you have chosen to connect, and its handling of your information is governed by its own terms and privacy policy. See Section 6 of our Privacy Policy for more on third-party services.

Grant program partners

When you participate in a grant program, accelerator program, or similar offering, the program funder may receive information about you in connection with administering the program. Grant program partners are governed by our Data Processing Agreement rather than this Subprocessor List. See Section 5.2 of our Privacy Policy.

Paid data access partners

Partners who pay for access to user data under our Data Processing Agreement Exhibit B are independent controllers of the information they receive, not Hello Alice subprocessors. See Section 5.3 of our Privacy Policy for details, including your right to opt out.

6. Updates to this list

We will keep this list current as our vendor relationships change. The "Last Updated" date at the top of this page reflects the most recent change.

7. Change log

This appendix logs notable updates to this Subprocessor List.

Version effective June 5, 2026

Initial publication of Hello Alice's Subprocessor List. Names the vendors currently used to deliver the Services, organized by function.

Contact

Questions about this list?

Email compliance@helloalice.com to ask about this Subprocessor List or to be notified of changes.

For our full contact details, see Section 14 of our Privacy Policy.