Skip to content
TealbrickBring your next client (opens WhatsApp)

Legal

Subprocessors

This page lists the providers that process personal data for Tealbrick Portal, and the services you connect yourself. It is the only subprocessor list and forms part of the Data Processing Addendum for business customers. Effective date: 15 October 2026.

Version 1.1 · Last updated 15 October 2026

1. Subprocessors

These providers process personal data for Polygonface s.r.o. to run Tealbrick Portal. For Workspace Data of business customers they are our sub-processors under the Data Processing Addendum. For Account Data, and for all data of consumer customers, where we are controller, they are our processors under the Privacy Policy. Your apps run in your own hosting account; no provider below processes their content on our behalf, and Portal does not receive your agents’ tool calls or the API keys you enter in the bridge page.

Railway Corporation

  • Purpose: hosts Portal (web app and core service), its database and the database backups, and serves the tealbrick.com website. Railway’s edge network routes requests to Portal and the website.
  • Personal data: all data held by Portal (see the Privacy Policy), backups, request logs with IP addresses.
  • Location: the EU West region (Amsterdam, Netherlands); backups stay in the same project and region. The edge network terminates connections at the location nearest to you.
  • Transfer safeguard: Standard Contractual Clauses in Railway’s data processing agreement (https://railway.com/legal/dpa), for any access from outside the European Economic Area.
  • Security information: https://docs.railway.com/maturity/compliance.

Clerk, Inc.

  • Purpose: sign-in, user identity and sessions. Holds the connections and tokens for external sign-in accounts you link (such as Google or GitHub). Sends sign-in, verification and account emails. Provides multi-factor authentication and bot protection.
  • Personal data: name, email address, password hash, linked accounts and tokens, session, device and IP data.
  • Location: United States.
  • Transfer safeguard: EU–US Data Privacy Framework (Clerk’s certification: https://clerk.com/legal/dpf) and Clerk’s data processing addendum (https://clerk.com/legal/dpa). If the Data Privacy Framework ceases to apply, the Standard Contractual Clauses apply.
  • Security information: https://clerk.com/security.

Stripe (Stripe Payments Europe, Limited and Stripe, Inc.)

  • Purpose: checkout, payment processing, tax calculation (Stripe Tax), fraud prevention, and emailing receipts and invoices. Stripe also processes some payment data as an independent controller.
  • Personal data: email address, name, business name, billing address, tax ID, payment method details, order references.
  • Location: Ireland and the United States.
  • Transfer safeguard: Standard Contractual Clauses or the EU–US Data Privacy Framework.

Cloudflare, Inc.

  • Purpose: DNS and content delivery for tealbrick.com; bot check (Turnstile) and network protection for the sign-in service, provided through Clerk.
  • Personal data: IP address, browser and network signals.
  • Location: global network.
  • Transfer safeguard: Standard Contractual Clauses or the EU–US Data Privacy Framework.

Proton AG (Proton Mail)

  • Purpose: receives and stores the emails you send to support@tealbrick.com, security@tealbrick.com and legal@tealbrick.com, and our replies.
  • Personal data: your email address and the content of your message, which may quote Workspace Data.
  • Location: Switzerland.
  • Transfer safeguard: the European Commission’s adequacy decision for Switzerland (Decision 2000/518/EC).

Error monitoring (run by us, not a subprocessor)

Portal sends error reports and uptime checks to a GlitchTip server that Polygonface s.r.o. runs itself on our own server. No third party receives these reports. Error reports contain the route, the error code, the type of the error and stack frames, not request bodies, cookies or tokens. GlitchTip removes personal data and IP addresses before it stores a report.

Source code and release hosting

GitHub, Inc. hosts our source code and distributes releases through GitHub Releases and the GitHub Container Registry. We send no customer personal data to GitHub in this process.

2. Services in your own workspace

The following are not Tealbrick subprocessors. You choose them, you hold the account and the keys, and your agreement with each provider governs how it handles your data. Polygonface s.r.o. does not process data through them on your behalf.

  • Your hosting provider: your own Railway account and the Railway project of each workspace. Your apps and their data are stored there. Portal acts in it only for actions you start. This is separate from the Railway account on which we host Portal.
  • Composio, if you use it in Connect. You connect your own accounts and your own Composio setup.
  • Custom and third-party MCP connectors that you add in Connect, and connectors from the Tealbrick catalog that run as self-hosted services in your own project.
  • Chat channels that you connect in Connect, such as Buzz, Slack, Teams, Telegram or Discord.
  • Model providers such as OpenAI, Anthropic, Google and OpenRouter. You enter your own API keys in the page served by the bridge on your side, and your apps call the providers you picked directly, on your account.
  • Any other third-party service that you connect to an app, and the accounts you use there.
  • External sign-in providers such as Google or GitHub, if you choose to sign in with them.
  • Agent applications, harnesses and runtimes (for example Claude Code, Codex, the Claude Agent SDK or other MCP clients) that you connect to your workspace bridge.

3. Changes to this list

We update this page before a new subprocessor starts processing personal data. We notify business customers by email or in Portal at least 30 days in advance. A business customer may object on reasonable data protection grounds within that period. If we cannot resolve the objection, the business customer may terminate the affected part of the Service, and we refund prepaid fees for any period after termination (Data Processing Addendum, section 5.3).

Contact

Polygonface s.r.o., Sládkovičova 60, 974 05 Banská Bystrica, Slovakia, registered in the Commercial Register of the District Court Banská Bystrica, Section Sro, Insert No. 29301/S; company ID (IČO) 50187210, tax ID (DIČ) 2120203151, VAT ID (IČ DPH) SK2120203151.

Email: support@tealbrick.com. Tealbrick is a brand of Polygonface s.r.o.