Service providers
Sage Brief LLC uses the providers below to operate, secure, and support the service. A provider receives only the information needed for the work it performs. Not every provider receives every category of information, and a provider may act as a processor, subprocessor, or independent controller depending on the service and context.
| Provider | Purpose | Information involved |
|---|---|---|
| Supabase, Inc. | Authentication, managed database, private file storage, realtime features, backups, and operational records | Account and authentication identifiers; workspace memberships and roles; requests, briefs, comments, specifications, uploaded files and extracted content; encrypted integration tokens; billing references; email queues and logs; and first-party usage events |
| Lovable Labs Incorporated | Application infrastructure, Google sign-in broker, AI gateway, transactional email delivery, and operational telemetry | Authentication metadata; content submitted for AI processing; generated output; voice audio routed for transcription; transcripts; operational usage and error metadata; recipient email address and message content; and IP, device, and browser data |
| Google LLC | AI model processing for certain supported features and service continuity; Google sign-in; user-requested Drive or Docs exports; and public-site font delivery | Relevant request, brief, specification, and extracted source content; generated output; basic Google identity; encrypted connection credentials stored by Sage Brief; exported Google Doc content and identifiers; and, for font delivery, IP address, device, browser, and asset-request metadata |
| OpenAI OpCo, LLC | AI model processing, currently including GPT-5.6 Terra, and speech transcription through Lovable’s AI gateway | Relevant request, brief, specification, transcript, and extracted source content; generated output; voice audio for transcription; and technical request and usage metadata |
| Stripe, LLC | Checkout, payment processing, subscription billing, and fraud prevention | Billing, payment, transaction, device, and fraud-prevention data |
| Cloudflare, Inc. | Website hosting, delivery, and security | IP address, device, browser, request, and security data |
User-connected services
Google, Asana, ClickUp, monday.com, Trello, and Jira are used only when a user signs in, connects the service, or asks Sage Brief to export or perform an action there. A user-directed export may include the complete consolidated brief and a Sage Brief link. These services receive information at the user’s direction and may process it under their own terms and privacy policies. They are not treated as Sage Brief subprocessors for user-directed processing unless the applicable contract says otherwise.
Public web asset services
Public pages may request fonts or integration icons from Google Fonts, jsDelivr, Simple Icons, or Iconify. Those services may receive IP address, browser, device, and asset-request information needed to return the file. They are third-party web services, not customer-content subprocessors.
Marketing measurement status
Sage Brief’s website includes a privacy-choice and first-party attribution foundation. That foundation does not, by itself, activate a third-party analytics or advertising provider. Before Sage Brief enables a new provider to receive personal information, we will update this page and the Privacy Policy as appropriate and apply the relevant privacy choice.
Where processing happens
These providers may process information in the United States and other countries where they or their approved providers operate. Sage Brief uses transfer safeguards where required by law.
Changes and questions
We update this page when the providers involved in Sage Brief materially change. Questions can be sent to support@sagebriefapp.com.
Sage Brief LLC
2108 N Street, Suite N
Sacramento, CA 95816