Sub-processors
Contents
Mission Growth Limited engages third-party companies (sub-processors) to help us deliver the Service. Each sub-processor is bound by a data processing agreement (DPA) that requires them to protect personal data to a standard at least as protective as our own obligations.
This page lists all current sub-processors. Where no public DPA URL is listed, contact us at contact@missiongrowth.io to request the current version.
| Vendor | Purpose | Jurisdiction | DPA |
|---|---|---|---|
Supabase Inc. | PurposeDatabase (PostgreSQL + pgvector), authentication, and file storage for all customer workspace data. | JurisdictionEU (Frankfurt, Germany, eu-central-1 region) | DPAView DPA |
Hetzner Online GmbH | PurposeServer infrastructure and API hosting for the Growth Brain backend. | JurisdictionGermany (Nuremberg and Falkenstein) | DPAView DPA |
Vercel Inc. | PurposeFrontend web application hosting and global content delivery network (CDN). | JurisdictionUnited States (global CDN edge nodes) | DPAView DPA |
Airwallex (Hong Kong) Ltd | PurposePayment processing, invoicing, and subscription billing management. | JurisdictionHong Kong SAR | DPAContact us |
OpenAI LLC | PurposeLarge language model (LLM) inference for AI-generated analytics and recommendations. Customer data is not used for model training. | JurisdictionUnited States | DPAView DPA |
Together AI Inc. | PurposePrimary LLM inference provider for AI-generated analytics and recommendations. Customer data is not used for model training. | JurisdictionUnited States | DPAContact us |
Composio Inc. | PurposeTool integration infrastructure, enabling the platform to connect to third-party services on the customer's behalf. | JurisdictionUnited States | DPAContact us |
PostHog Inc. | PurposeProduct analytics, exception tracking, and session recording. Cookieless tracking mode is active pre-consent (no device storage; server-side daily-rotating hash). Post-consent enables cookie persistence and session recording, with all form fields masked by default. Analytics data is processed on EU infrastructure (Frankfurt, eu-central-1). | JurisdictionEU (Frankfurt, eu-central-1) | DPAView DPA |
About this list
The table above lists every sub-processor that processes personal data in connection with the Service. The list includes the sub-processor's name, the purpose for which they process data, the country where processing occurs, and a link to their DPA where one is publicly available.
Personal data processed by LLM sub-processors (OpenAI and Together AI) is used solely to generate outputs in response to your inputs. Neither provider uses your data to train or fine-tune their models. This is a contractual requirement in our agreements with them.
For sub-processors where no public DPA URL is listed (Airwallex, Together AI, Composio), we have executed a DPA directly with the provider. You may request a copy by emailing contact@missiongrowth.io.
Notification of changes
We will notify customers at least 30 days before engaging a new sub-processor that will process personal data from customer workspaces. We will do this by:
- Updating this page with the new sub-processor's details, and - Sending an email notification to the billing contact on each affected account.
The 30-day notice period gives you time to review the change before it takes effect.
Customer rights
If you have a reasonable objection to a new sub-processor, notify us in writing at contact@missiongrowth.io within 30 days of the notification. We will work with you to understand your concern and attempt to resolve it.
If the concern cannot be resolved and the engagement of the new sub-processor would materially affect our ability to deliver the Service, you may terminate your subscription on written notice. In that case, we will issue a pro-rata refund for any unused portion of a pre-paid subscription period.
We do not grant the same termination right for sub-processor changes that do not affect the processing of personal data from your workspace.
Contact
Questions about our sub-processors or this list: contact@missiongrowth.io.
Mission Growth Limited, Unit 2A, 17/F, Glenealy Tower, No.1 Glenealy, Central, Hong Kong S.A.R.
Legal notice
This document is a current-state version of our legal terms, prepared with research from leading B2B SaaS templates and Hong Kong / EU / Türkiye regulatory sources. It is undergoing review by Hong Kong-licensed counsel and Turkish counsel where applicable. Please contact contact@missiongrowth.io with any questions or to request the latest counsel-reviewed version.