Subprocessors
Last updated: April 1, 2026
Super Mega Lab LLC, doing business as tidbiits ("Company," "we," "us," or "our"), uses the following third-party subprocessors to help deliver and operate the Services. This page lists each subprocessor, its purpose, and where it processes data.
This list is maintained in accordance with our Privacy Policy and any applicable Data Processing Addendum (DPA) we may enter into with our customers.
CURRENT SUBPROCESSORS
Infrastructure and Hosting
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| Vercel Inc. | Application hosting and serverless compute | All Service data transmitted through the web application, including account information and request/response data | United States |
| Cloudflare, Inc. (R2) | Object storage for processed content blobs | Processed content blobs (summaries, source material retained for reprocessing) | United States |
| Vercel Inc. (Postgres) | Database hosting and management | Account data, workspace metadata, content metadata, annotations, insights | United States |
AI Processing
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| OpenAI, L.L.C. | AI-powered chat, content vectorization, and knowledge graph construction | User chat messages, submitted content (text extracted from URLs, uploaded documents, pasted text), and AI-generated summaries | United States |
| Google LLC | AI-powered content summarization, intelligence extraction, and synthesis (via Gemini API) | Submitted content (text extracted from URLs, uploaded documents, pasted text) | United States |
Payment Processing
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| Stripe, Inc. | Subscription billing, payment processing, fraud prevention | Name, email, payment method details, billing address, transaction history | United States |
Authentication
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| Google LLC | OAuth authentication (Sign in with Google), Google Docs import via Picker | Name, email address, profile picture, Google Docs content (when imported by user) | United States |
Communications
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| Resend Inc. | Transactional email delivery (account verification, billing notifications, activity alerts, email digests) | Name, email address, notification content | United States |
Analytics
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| None currently | — | — | — |
Error Monitoring and Logging
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| Sentry (Functional Software, Inc.) | Error tracking and performance monitoring across web and worker runtimes | Error traces, request path/method, anonymized user ID, browser/device metadata, masked session replays on errors (no PII — sendDefaultPii: false) | United States |
| Axiom, Inc. | Structured log aggregation for worker processes | Job lifecycle logs (job IDs, content IDs, processing stages), system performance data | United States |
Integrations (User-Initiated)
The following subprocessors are only engaged when a user or workspace administrator actively connects the integration:
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| Linear Inc. | Push insights as issues to Linear (when connected by workspace admin) | Insight title, description, status, priority, and back-link URL | United States |
SUBPROCESSOR CHANGE NOTIFICATION
We may update this subprocessor list from time to time as we add, change, or remove subprocessors. When we make material changes to this list (such as adding a new subprocessor or changing the purpose or location of an existing one), we will:
- Update this page with the new subprocessor information
- Update the "Last updated" date at the top of this page
- Provide at least thirty (30) days advance notice before the new subprocessor begins processing customer data
Customers who have entered into a Data Processing Addendum (DPA) with us will be notified directly by email of any subprocessor changes, in accordance with the terms of the DPA.
If you have concerns about a new subprocessor, please contact us at contact@supermegalab.com within the thirty (30) day notice period.
CONTACT US
If you have questions about our subprocessors or data processing practices, please contact us at:
Super Mega Lab LLC Email: contact@supermegalab.com