Our processors
Last updated: October 29, 2026
The essentials
- Every provider is bound by a data protection agreement.
- Hosting, emails, texts and moderation: in France.
- We publish any change before it takes effect.
This English translation is provided for convenience. If it differs from the French version, the French version prevails.
These are the service providers that process personal data on behalf of SECRETARAI to run Rimbi. Each one is bound by a data processing agreement (Article 28 of the GDPR). We update this list before any change.
| Provider | Country | What it does | Data concerned | Safeguards for transfers |
|---|---|---|---|---|
| Supabase Pte. Ltd. (Singapore, Supabase, Inc. group), on the infrastructure of Amazon Web Services EMEA SARL | Data in France (Paris region); company in Singapore, parent company in the United States | Database, accounts, files, server functions | All app data | Data stored in France; exceptional support access covered by the Data Privacy Framework and standard contractual clauses |
| Cloudflare, Inc. | United States (global network) | Hosting and delivery of the rimbi.app website and the guests’ web page | IP address, browser and page requested, in technical logs | Data Privacy Framework, or otherwise standard contractual clauses |
| Brevo (Sendinblue SAS) | France | Sending emails and SMS (invitations, security alerts, reminders) | First name, email or phone number, message content | No transfer outside the EU planned |
| Mistral AI | France | Automatic analysis of messages before publication (moderation) | Text of discussion messages and secret messages | No transfer outside the EU planned |
| Expo (650 Industries, Inc.) | United States | Delivery of notifications to Apple and Google | Notification token, notification text (never the name of a person who was drawn) | Data Privacy Framework or standard contractual clauses |
| RevenueCat, Inc. | United States | Tracking the status of subscriptions purchased on the app stores | Anonymous account identifier, subscription status | Data Privacy Framework or standard contractual clauses |
Independent controllers (they process your data under their own policies):
- Apple and Google: distribution of the app, payment for in-app purchases, final delivery of notifications.