Sub-processors
Hilma uses the following third-party sub-processors to deliver the Service. Each sub-processor is contractually bound to process personal data only on our instructions and to appropriate data protection standards.
We will update this page when sub-processors are added or removed, and notify users of material changes in accordance with our Privacy Policy.
AnthropicPrivacy policy ↗
- Purpose
- AI inference — PR scoring and evaluation
- Location
- United States
- Data processed
- PR diffs, metadata, and context data. Processed transiently; not stored by Anthropic.
- EU transfer mechanism
- Standard Contractual Clauses
SupabasePrivacy policy ↗
- Purpose
- Database and storage
- Location
- Frankfurt, Germany (EU Central)
- Data processed
- All user account data, invocations, results, integration credentials, feedback, and outcomes.
ClerkPrivacy policy ↗
- Purpose
- Authentication
- Location
- United States
- Data processed
- Name, email address, authentication credentials, and session data.
- EU transfer mechanism
- Standard Contractual Clauses
VercelPrivacy policy ↗
- Purpose
- Hosting and deployment
- Location
- United States / Global CDN
- Data processed
- HTTP request logs (IP addresses, request paths). Transient; subject to Vercel's data retention.
- EU transfer mechanism
- Standard Contractual Clauses
ResendPrivacy policy ↗
- Purpose
- Transactional email (result notifications, welcome emails, review share emails)
- Location
- United States
- Data processed
- Recipient email address, email content.
- EU transfer mechanism
- Standard Contractual Clauses
PostHogPrivacy policy ↗
- Purpose
- Usage analytics
- Location
- European Union
- Data processed
- Anonymised usage events (pages visited, features used). No personal identifiers in events.
IntercomPrivacy policy ↗
- Purpose
- Support chat and product feedback (the in-app and website messenger)
- Location
- United States
- Data processed
- Name, email address, user ID, and the content of support conversations you start.
- EU transfer mechanism
- Standard Contractual Clauses
SentryPrivacy policy ↗
- Purpose
- Error monitoring
- Location
- United States
- Data processed
- Error stack traces and request context. May include partial request data; no PR content or credentials.
- EU transfer mechanism
- Standard Contractual Clauses
Questions
For questions about our sub-processor use or data transfers, contact hello@gethilma.io.