Subprocessors & Third Parties
Public list of technical providers, subprocessors and third-party integrations used to deliver Trigglow, under Article 28 of the GDPR (Regulation EU 2016/679).
1. Compliance Commitment & Hosting
The subprocessors listed in section 2 process personal data on Trigglow’s behalf and under its instructions, bound by data processing agreements under Article 28 of the GDPR.
The API, databases (PostgreSQL and Redis) and uploaded files are hosted on Trigglow’s own servers operated in Spain (European Union), with no external hosting provider. Only the web frontend is served through Vercel.
2. Subprocessors
These providers process personal data on behalf of and under the instructions of Trigglow:
| Provider | Service | Location | Data Processed | International Transfer |
|---|---|---|---|---|
| Vercel Inc. | Frontend hosting and CDN | US / EU Edge nodes | IP address, User-Agent and web requests | Data Privacy Framework / Standard Contractual Clauses (SCCs) |
| Resend Inc. | Transactional email delivery | US | Email address and username | Data Privacy Framework / SCCs |
| OpenAI Ireland Ltd / OpenAI, L.L.C. | Automated moderation of uploaded content | Ireland (EU) / US | Text and images submitted for moderation | Data Privacy Framework / SCCs. Use to train models is not authorized |
| NVIDIA Corporation | Audio transcription for clip subtitles and AI support assistant (Trigi, on the web and in the OBS plugin) | US | Clip audio, messages sent to the support assistant and, only if the user turns them on in the OBS plugin, OBS technical data (numbers and states) | Data Privacy Framework / SCCs. Use to train models is not authorized |
3. Third Parties & Independent Controllers
These providers and platforms do not process data under Trigglow’s instructions: they act as independent controllers, or under the authorization you grant when connecting them, and are governed by their own terms and privacy policies:
| Provider / Platform | Role in Trigglow | Location | Data Involved | Status |
|---|---|---|---|---|
| Stripe Payments Europe, Ltd. | Payments, billing and Stripe Connect | Ireland (EU) / US | Customer IDs, transactions and KYC data | Independent controller (banking compliance and fraud prevention) |
| Kick Streaming Pty Ltd | Integration with Kick channels (chat, alerts and events) | Australia / Global | User ID, channel, tokens and live events | External platform, user’s OAuth authorization |
| Twitch Interactive, Inc. | Integration with Twitch channels (chat, alerts and events) | US | User ID, channel, tokens and live events | External platform, user’s OAuth authorization |
| Google LLC (YouTube API Services) | Integration with YouTube channels (chat, alerts and events) | US / Global | Channel ID and name, tokens, chat and events | External platform, user’s OAuth authorization |
| Discord Inc. | Integration with Discord servers (commands, roles and moderation) | US | Server, channel and role IDs and messages | External platform, user’s OAuth authorization |
| Spotify AB | Integration with currently playing music for overlays | Sweden (EU) | OAuth tokens and playing track | External platform, user’s OAuth authorization |
| Nightbot and Botrix | Command import (only if you use it) | US / Global | Your account’s command list | External platform, user’s authorization |
| AD MARKET LIMITED (Adsterra) | Advertising on the Free plan and public pages | Cyprus (EU) | Advertising cookies and identifiers | Independent controller, only with your prior consent |
4. Changes & Right to Object
We will notify any addition or replacement of a section 2 subprocessor at least 14 calendar days in advance, via the dashboard or by email.
You may object in writing (contact@trigglow.com) on justified data-protection grounds. If it is not technically feasible to keep providing the service without the new provider, you may terminate your contract and cancel your subscription without penalty effective when the change takes place.