Sub-processors
Last updated 22 October 2026
Draft: some details below are still being confirmed.
These are the providers Blackpebble Ltd uses to run Pebble WFM that may process personal data. Each works only on our instructions, under a contract that requires it to protect the data. How we use personal data is in our privacy policy; for customers, our terms and data processing agreement apply.
The Pebble WFM app
These process customer data on our behalf when your organisation uses the app.
| Provider | Purpose | Data | Location | Transfer safeguard |
|---|---|---|---|---|
| Google Cloud (Google LLC) | Hosting, database, backups and logs for the app | All customer data and account details | London, UK (europe-west2) | None needed: data stays in the UK |
| Google Gemini API (Google LLC) | The app's assistant, and proposing column mappings for spreadsheet import | Questions asked and the schedule, people and forecast details needed to answer; a masked summary of an imported file's layout | Not pinned to a region; may be outside the UK | Google's data processing terms with UK transfer terms [to confirm] |
| Resend | Sending the app's emails | Names, email addresses, and short notices with links (invitations, password resets, schedule notices, trial reminders) | United States | UK Addendum to the EU standard contractual clauses in Resend's DPA [to confirm] |
| Stripe | Billing and payments | Billing contact name, email and address, VAT number, payment details (held by Stripe, not us) | United States and Ireland | UK–US data bridge, or the UK Addendum in Stripe's DPA [to confirm] |
| Proton AG | Our support inbox, hello@pebblewfm.com | Whatever you send us by email | Switzerland | UK adequacy regulations (Switzerland) |
pebblewfm.com only
These are used on the public site, where we are the controller. They never receive app data.
| Provider | Purpose | Data | Location | Transfer safeguard |
|---|---|---|---|---|
| Anthropic | The help chat on pebblewfm.com | Questions typed into the chat and the calculator's inputs and results. No app data | United States | UK Addendum to the EU standard contractual clauses in Anthropic's DPA [to confirm] |
| Google Analytics (Google LLC) | Site analytics on pebblewfm.com, only if you allow it | Page views, clicks, IP address and cookie IDs. No app data | May be outside the UK | Google's data processing terms with UK transfer terms [to confirm] |
Changes
Before we add or replace a provider that processes customer data, we email each organisation's account owners (its managers) at least 30 days in advance, and then update this page. If you have a reasonable data protection objection to a new provider, you can object under our data processing agreement within that period. We will then work with you to find an alternative and, if we cannot, you may end the affected part of the service.
Questions: hello@pebblewfm.com.