Back to Privacy PolicyBindy
Subprocessors
Last updated: 3 May 2026
To operate Bindy we rely on a small set of trusted vendors. The table below lists every service that may process your personal information, what they do, and where their infrastructure sits. Adding a new subprocessor or making a material change requires updating this page first. Questions? Email privacy@bindy.au.
Supabase
Privacy policy- Purpose
- Primary database, file storage, and authentication
- Data processed
- Account credentials, business profile, tender activity, AI bid drafts, uploaded documents
- Location
- Sydney, Australia (ap-southeast-2)
Vercel
Privacy policy- Purpose
- Web application hosting and global edge network
- Data processed
- Request logs (IP, path, response time)
- Location
- Sydney edge for AU traffic; control plane in the US
Anthropic
Privacy policy- Purpose
- AI bid generation, document analysis, and chat
- Data processed
- Tender content, your business profile, the prompts and outputs of bid drafts
- Location
- United States
Stripe
Privacy policy- Purpose
- Subscription billing and payment processing
- Data processed
- Email, billing name, payment method, invoice history (ABN if provided)
- Location
- Australia (Stripe AU entity) + US
Resend
Privacy policy- Purpose
- Transactional email delivery (alerts, digests, receipts)
- Data processed
- Email address, name, message content of emails we send
- Location
- United States
Cloudinary
Privacy policy- Purpose
- Image hosting (logos, brand assets, illustrations on the site)
- Data processed
- Public image assets only — no customer PII
- Location
- Global CDN; primary US
Telegram
Privacy policy- Purpose
- Internal operational alerting (scraper failures, deploys)
- Data processed
- No customer data — only system status messages between Bindy engineers
- Location
- Cyprus / Dubai
Sentry
Privacy policy- Purpose
- Production error monitoring and alerting
- Data processed
- Stack traces, request URLs, user ID (UUID — not personal data), error context. PII is filtered out by default.
- Location
- United States (sentry.io)
Bindy is the data controller. Each subprocessor above acts as a data processor under our agreements. Our right-to-access and right-to-deletion endpoints (Settings → Your data) reach all customer-data systems above; export your data or close your account at any time without contacting us.