Legal

Sub-processors

Last updated

We share data only with the service providers (sub-processors) that help us run the Service, and each works under a data-processing agreement. For transfers of personal data from the EU/EEA, we rely on the EU–US Data Privacy Framework and standard contractual clauses.

  • Convex, Inc.

    What it does for us
    database and application backend: your account, workspace content and product-usage data.
    Where
    United States

  • Vercel Inc.

    What it does for us
    hosting and delivery of the website and web app; Web Analytics, which counts page views in aggregate without cookies; and Speed Insights, which takes page-performance measurements without cookies.
    Where
    United States (server functions); its global edge and CDN serve pages near you

  • Resend, Inc.

    What it does for us
    sending service emails (sign-up, invitations, notifications).
    Where
    may process outside the EU

  • Stripe, Inc.

    What it does for us
    payments and billing for paid plans. We never see or store your full card number.
    Where
    may process outside the EU

  • Anthropic, PBC

    What it does for us
    reached through Vercel AI Gateway, which may run it on Amazon Web Services or Google Cloud: suggests labels for items in your inbox. Short excerpts of an item's text are sent, and providers may keep them for a limited time under their own terms. You or a workspace admin can turn this off in Settings.
    Where
    United States

The same list is in section 4 of our privacy policy.