Sub-processors
The companies that process personal data on our behalf when you use this website and its services.
Brutally Honest Oy
A limited company registered in the Finnish Trade Register.
Operating as The Brutally Honest.
Business ID 3574434-1 · VAT FI35744341
Koroistentie 4 F 1, 00280 Helsinki, Finland
1. Current sub-processors
Google Analytics 4
Purpose: Web analytics and event tracking (analytics, with consent)
Location: EU and USA
Google Tag Manager
Purpose: Tag management
Location: EU and USA
Google Ads
Purpose: Conversion tracking and remarketing (marketing, with consent)
Location: EU and USA
Microsoft Clarity
Purpose: Behavioural analytics, heatmaps and session replay (analytics, with consent)
Location: EU and USA
Meta (Facebook) Pixel
Purpose: Ad conversion and audience building (marketing, with consent)
Location: EU and USA
LinkedIn Insight Tag
Purpose: Ad conversion and audience insights (marketing, with consent)
Location: EU and USA
TikTok Pixel
Purpose: Ad conversion and optimisation (marketing, with consent)
Location: EU and USA
OpenAI
Purpose: ChatGPT Ads Conversions API: our server reports notes sign-ups to measure our ads (marketing, with consent). OpenAI uses this data as an independent controller
Location: EU and USA
Resend
Purpose: E-mail delivery
Location: USA
HubSpot
Purpose: Contact records
Location: EU and USA
Supabase (via Lovable Cloud)
Purpose: Database and server functions for e-mail sign-ups, inquiry forms, our record of your cookie choice and the welcome code count on /links
Location: EU (Sweden)
Lovable
Purpose: Website hosting
Location: EU and USA
Cloudflare (through Lovable)
Purpose: Protects and delivers the website and the platforms, and tells people from bots (the __cf_bm cookie)
Location: USA
Cloudflare Turnstile
Purpose: Checks that a person, not a bot, is using our forms
Location: USA
Composio
Purpose: Connects our tools: reads bookings into our contact records and runs our e-mail automations
Location: USA
Instantly
Purpose: Sends our business development e-mails
Location: USA
Apify
Purpose: Collects public business contact information
Location: EU and USA
| Service | Purpose | Location |
|---|---|---|
| Google Analytics 4 | Web analytics and event tracking (analytics, with consent) | EU and USA |
| Google Tag Manager | Tag management | EU and USA |
| Google Ads | Conversion tracking and remarketing (marketing, with consent) | EU and USA |
| Microsoft Clarity | Behavioural analytics, heatmaps and session replay (analytics, with consent) | EU and USA |
| Meta (Facebook) Pixel | Ad conversion and audience building (marketing, with consent) | EU and USA |
| LinkedIn Insight Tag | Ad conversion and audience insights (marketing, with consent) | EU and USA |
| TikTok Pixel | Ad conversion and optimisation (marketing, with consent) | EU and USA |
| OpenAI | ChatGPT Ads Conversions API: our server reports notes sign-ups to measure our ads (marketing, with consent). OpenAI uses this data as an independent controller | EU and USA |
| Resend | E-mail delivery | USA |
| HubSpot | Contact records | EU and USA |
| Supabase (via Lovable Cloud) | Database and server functions for e-mail sign-ups, inquiry forms, our record of your cookie choice and the welcome code count on /links | EU (Sweden) |
| Lovable | Website hosting | EU and USA |
| Cloudflare (through Lovable) | Protects and delivers the website and the platforms, and tells people from bots (the __cf_bm cookie) | USA |
| Cloudflare Turnstile | Checks that a person, not a bot, is using our forms | USA |
| Composio | Connects our tools: reads bookings into our contact records and runs our e-mail automations | USA |
| Instantly | Sends our business development e-mails | USA |
| Apify | Collects public business contact information | EU and USA |
We update this list when we add or replace a sub-processor. The Privacy Policy explains what each one does with your data.
Organisations we process data for hear from us by e-mail at least 30 days before we add or replace a service on this list.