Brandkit 3rd party vendors/sub processors

We use a host of 3rd parties to deliver Brandkit services. 

Below we list them and in some cases the personal data that they collect.

Intercom (app plugin that we use for marketing and support)

  • Full name
  • Email address
  • Company/Organisation name
  • Job Title
  • Phone number
  • Industry
  • Browser and Browser Version
  • Operating System and version
  • Opens and reads of sent email and other messages
  • Number of user sessions in the App. 
  • Location.
  • Browser Language
  • Referral URL
  • User Role in app
  • LinkedIn public profile url
  • Twitter follower count
  • Feedback/NPS survey responses
  • Conversation ratings for Intercom support
  • Email history
  • Chat history
  • Download and Share history
  • View History
  • Last page viewed
  • Acceptance of Terms of Use & acceptance date
  • Opt in-to marketing emails and opt-in date
  • Last app sort settings
  • Last app grid size settings
  • Last selection of assets
  • Last tag search
  • Last login state (Session Cookie)

We collect this data across all Brandkit accounts and the Brandkit Marketing site (at in a single Intercom database.  

We use Intercom for both customer support, marketing and sales. This may include chat and email. You can opt out of Intercom emails by following the opt out instructions in the email.

Stripe (used to Credit Card payments)

Note Brandkit never stores this data - this only handled by the Stripe system.

  • Credit Card Name
  • Credit Card Number
  • Expiry Date

Amazon AWS (Cloud Infrastructure)

As the cloud infrastructure provider, personal data that we collect in the Brandkit App, is ultimately processed and stored in AWS servers.

Heroku (Cloud Infrastructure)

As a cloud infrastructure provider, personal data that we collect in the Brandkit App, is processed through Heroku servers.

Filestack (Cloud Infrastructure)

Filestack is used to upload and process uploaded files. We consider uploaded assets as non personal data (i.e. any file you submit or upload to a Brandkit account is considered business data rather than personal data).

Redis Labs (Cloud Infrastructure)

Redis Labs provides cloud database and search indexing services. Mainly used for asset metadata, but some personal data may be transported and stored in Redis Labs servers.

Zapier and Piesync (Synchronisation & Integration)

Zapier and PieSync are syncing and integration services used to keep different software systems up to date. Some personal data may be transported by these vendors on our behalf but they do not store your personal data (other than a transfer history)

For example, when a user signs up as an Admin user in Brandkit, that user's personal data is recorded in Intercom (for support) and Piesync is used to copy that data to our CRM system supplied by vendor Prosperworks (for Account Management and Marketing).

Hubspot (CRM)

Hubspot is our CRM and generally the place where we collect centralise all personal data for customers (Brandkit paying customer contacts - not Brandkit users), prospective customers, leads, suppliers and partners.

Hubspot software also uses automation to provide additional personal and company data from other sources,

In Hubspot we collect

  • Name
  • Company
  • Email addresses
  • Phone Numbers
  • Fax number
  • Job Title
  • Address
  • Websites
  • Linkedin profile address
  • Lead Source
  • Email Correspondence
  • Relationship to Deals/Accounts
  • Relationship to Tasks
  • Appointments/Meetings
  • Phone calls

SendGrid (Cloud Email delivery service)

SendGrid provide email services for the Brandkit Platform. All system emails (such as Registration Confirmation, Lost Password Emails, Asset Notifications, etc) are sent via the SendGrid service.

Therefore personal data includes name, email address and email content is transported and some data stored by SendGrid on our behalf.

  • Name
  • Email address

You opt out of email via SendGrid by following the instructions at the bottom of emails, by editing your user account profile, or by contacting

Note: We do not use SendGrid for Brandkit Marketing Emails.

Google Analytics  (website and traffic analytics)

Googles provides analytics across a wide collection of data from site visits by users. Brandkit includes a Google Analytics (GA) code snippet on every web page and site visit/traffic data is processed and store by GA including some personal data such as ip address, location data, etc.

You can opt out of Google Analytics here.

New Relic (Performance Monitoring and Management)

PaperTrail (Cloud Log management)

Bonsai ElasticSearch (Cloud fully managed full-text search engine)

OMC/Bonsai provide our elasticsearch based full text search engine that drives our fast asset search. Consequently all Asset metadata is stored and transporetd via Bonsai servers. Some personal data attached to assets such as email address (uploaded by, sourced from fields) may be stored.

Campaign Monitor (Email Marketing)

We use Campaign Monitor (CM) to send marketing emails to customers, prospective customers and other subscribed email addresses. 

In CM we have several different lists and we store (varies per list):-

  • Name
  • Email Address
  • Company
  • Job Title
  • Phone
  • Date subscribed
  • Opted in/Opted out
  • Email read/open and click history
  • Location 
  • IP address

You can opt out of Campaign Monitor emails by follow the opt out instructions at the bottom of emails, or by contacting

Wufoo (Cloud form builder and database)

We use Wufoo to build custom marketing forms to collect personal data for marketing. Data entered into forms is collected and stored on Wufoo servers and maybe synced with other software (such as our CRM and Email Marketing lists). 

Personal data collected varies per form but generally includes:

  • Name
  • Email address
  • Company
  • Job Title
  • Phone

XERO (Cloud accounting)

We use Xero for invoicing and store personal contact data against each customer account. Personal Data includes:

  • Name
  • Email address
  • Phone

For all 3rd party services.

You can request a copy of any personal data that is held or request that be deleted by contacting


Save Download

Brandkit 3rd party vendors/sub processors

A list of sub-processors (3rd party vendors) for EU GDPR Compliance

Asset type post
ID 113833
Word count 940 words


Licence Worldwide Paid and Unpaid Available to anyone for royalty free use in paid and unpaid media worldwide, provided Brandkit benefits from such use, with attribution required to the named Credit, when a Credit is provided.
Expiry No expiry date


Join 176,223+ users already on Brandkit

Your story matters. Help your collaborators find your content, tell your story with confidence, and build a stronger brand.

All for a reasonable and fair price. See pricing here.


Subscribe to Updates Tour Book a Demo

Statistics above last updated 1 March 2024