This page lists the providers that process personal information for Robin. Our Privacy Policy explains why we use them and your rights. We update this page before a new provider starts to receive personal information.
Providers that work for us
| Provider | What it does | Where | Transfer safeguard |
|---|
| Supabase | Database, file storage and backups | London, United Kingdom | None needed |
| Vercel | Hosting and server functions, and routing of AI requests | United Kingdom and Germany for our application; Vercel Inc. is in the United States | The safeguards in Vercel's data processing agreement |
| Clerk | Sign-in and account security | United States | The safeguards in Clerk's data processing agreement |
| Brevo | Email delivery | European Union | None needed |
| PostHog | Product analytics, session replay (only with your consent), logs and support records | European Union (Germany) | None needed |
| Upstash | Rate limits that protect the service from abuse, and a short-lived cache of directory search results | United States | The safeguards in Upstash's data processing agreement |
| Daily.co | Video calls | United States | Certified under the EU-US Data Privacy Framework |
| Deepgram (through Daily.co) | Speech-to-text for call transcription. We tell Deepgram, through Daily.co, to keep call audio out of its model improvement. | United States | Daily.co's data processing agreement |
| Anthropic (through the Vercel AI Gateway) | AI model for our AI features, and for the analysis of a transcript that a host asks for. It must not train its models on what we send. | United States | Standard Contractual Clauses and the UK Addendum, in Anthropic's data processing addendum |
| ElevenLabs | Voice AI and speech-to-text | United States | The safeguards in ElevenLabs' data processing agreement |
| Slack | Team messaging. It receives contact-form messages, course ratings and other feedback you send us, so that a person at Robin reads them. | United States | The safeguards in Slack's data processing agreement |
| Termly | Cookie consent | United States | The safeguards in Termly's data processing agreement |
Session recordings and transcripts
When we process a session's recordings and transcripts for its host, we use these providers: Supabase, Vercel, Daily.co, Deepgram and Anthropic. The host authorises them under the Data Processing Terms for Session Artifacts in our Terms and Conditions. We tell hosts at least 30 days before we add or replace one, by email or by a notice in Robin, so that a host can object.
Professional contacts and coaching logs
When we keep professional records for a coach, we use Supabase and Vercel. The coach authorises them under the Data Processing Terms for Professional Records in our Terms and Conditions. We tell coaches at least 30 days before we add or replace one, by email or by a notice in Robin, so that a coach can object.
Organisations that decide for themselves
| Organisation | When | Its role |
|---|
| Stripe | When you buy something | Merchant of record. It sells to you and handles payment, tax and disputes under its own privacy notice. |
| Google | When you sign in with Google or connect Google Calendar | Handles its side under its own terms |
| Meta | When you accept advertising cookies | Measures our advertising |
| YouTube and Loom | When you play a video embedded on Robin | Serves the video under its own terms |