Builds · Legal
Sub-processors
Builds is run by Digital One Technology Consulting Limited (Ireland, company number 793205). These are the companies that process personal data for us to run Builds, what they get, and where. We have a data processing agreement with each of them.
Who processes data for Builds
| Company | What it does for Builds | What it gets | Where | Safeguard for transfers |
|---|---|---|---|---|
| Hostinger International Ltd (Cyprus) | Runs the server app.builds.one (and builds.one) | Everything app.builds.one keeps (Privacy Policy §4), and conversations passing through in memory | Frankfurt am Main, Germany | None needed: EEA |
| PostHog Inc. (USA), EU Cloud | Crash reports and usage counts, only from people who said yes | A random device id, app version and platform, screens by shape, errors and crash stacks; no message text, file names or account | Frankfurt, Germany (AWS eu-central-1) | Data stays in the EU; PostHog's data processing agreement includes the Standard Contractual Clauses for any access from the US |
| Resend, Inc. (USA) | Sends invitation emails | The invited person's address, the sender's name and address, the note, the link | United States (stores sent mail and logs 30 days) | EU–US Data Privacy Framework, and Standard Contractual Clauses in Resend's data processing agreement |
| Cloudflare, Inc. (USA) | Sits in front of Digital One's sign-in (ai.digital1.one, api.digital1.one, id.digital1.one) | Your network address and the sign-in requests | Cloudflare's network, nearest location | EU–US Data Privacy Framework, and Standard Contractual Clauses in Cloudflare's data processing agreement |
Services that deliver notifications
They do not work for us on your data in the usual sense: your device's operating system or browser chose them. They are listed because a notification's words pass through them.
| Company | What | Notes |
|---|---|---|
| Apple (Apple Push Notification service) | Your iPhone's or iPad's push token, and the notification (a desk's name and the first words of its question or result) | Every iOS app's notifications go this way |
| Google (Firebase Cloud Messaging) | The same, for the Android preview | Android only |
| Your browser's push service (Apple, Google, Mozilla, Microsoft) | A web push subscription and an encrypted notification it cannot read (RFC 8291) | The web app's notifications |
Other Digital One products
Same company, so not sub-processors; listed so you can see the whole path.
| Product | When | What |
|---|---|---|
Digital One ID (ai.digital1.one, id.digital1.one) | Every sign-in | Your account id, email and sign-in. You sign in with a code sent to your email, or with Google, GitHub, Microsoft or Apple; if you pick one of those, that company takes part in the sign-in under its own terms. The sign-in page counts its own use with PostHog (EU) only if you say yes there, and serves its fonts from its own server |
| DispatChai (dispatchai.cloud) | If you link it, buy a residence, or accept an invitation with a free one | Your account id, email, whether it is verified, the invitation, the residence's size and end. DispatChai's machines run at Hetzner Online GmbH in Germany and Finland, under DispatChai's own policies |
| FrontierScore | If its card is on | Your own FrontierScore key |
| Gateward | Only on a team's key (Privacy Policy §9) | The prompts of desks on that key, passed on to the model vendor, and their use and cost. Gateward sends them only to the models the team put in its own Gateward catalog, on the team's own provider accounts: Anthropic, OpenAI, Azure OpenAI, AWS Bedrock, Google Vertex AI, or any service with OpenAI's interface (for example xAI, DeepSeek, Mistral or a model the team runs itself) |
| SkilledMind | Only where a team turned on its knowledge | The team's knowledge; summaries of finished conversations where a desk's "learn" switch is on. SkilledMind sends that text, through Gateward on Digital One's own accounts, to OpenAI (to index it for search, model text-embedding-3-small) and to Anthropic (Claude, to summarise it and answer from it) |
Not sub-processors: the AI vendors you choose
Anthropic, OpenAI, xAI, Google, Mistral and any other model vendor receive your prompts and code from your own machine, under your account and agreement with them. We are not a party to it and do not see that traffic. For business use they belong on your list, not ours. (A team's key through Gateward is the exception: there the model vendors the team chose in Gateward serve the team's Gateward account, and the team's data processing agreement names them.)
When this list changes
We update this page first, with the date. Teams with a data processing agreement (Terms §12) get an email 30 days before a new sub-processor starts on their data, and may object. Urgent replacements (an outage, a security problem) may happen first and be told as soon as we can.
Changelog
| Date | Change |
|---|---|
| 4 October 2026 | First version of this list |
| 4 October 2026 | Digital One's sign-in page counts its use with PostHog only after a yes, and serves its own fonts: Google Fonts no longer receives anything from it |
Contact: info@digital1.one
Last updated