PROCESSORS
Subprocessors
The external services that handle data on our behalf, what each one receives, and the legal safeguard behind every transfer.
Your snippet content lives on your devices and never reaches these services. This list covers site delivery, licensing, support, and the optional integrations you switch on yourself.
| Service | Role | Data received | Location | Transfer safeguard | DPA status |
|---|---|---|---|---|---|
| Cloudflare | Site hosting, Workers (including the API that relays AI requests to Anthropic), database, bot protection, site analytics, Workers AI for the browser extension's AI Chat after the daily Claude limit | Platform request logs, captcha responses, aggregate site visits, AI requests passing through our Worker, AI Chat messages from the browser extension answered by Workers AI after the daily Claude limit, and daily AI usage counters without any text | Global edge network (US and EU points of presence) | Standard contractual clauses under the Cloudflare DPA once executed | DPA pending |
| Anthropic | Claude API for desktop AI features you turn on and for the browser extension's AI Chat, reached only through our Worker, which keeps the API key | Text of AI requests from desktop features you turned on (all off by default) and AI Chat messages from the browser extension until the daily Claude limit; for some desktop features, also an image: up to 5 downscaled screenshots (daily journal), an image you attach or choose (AI chat panel, AI companion), the snippet's own image (snippet titles and tags), or a downscaled screen capture (Ask Anything, dictation and translation, only while Visual Screen Context is on, which is off by default) | United States (Anthropic infrastructure) | Anthropic commercial terms; API inputs and outputs are deleted within 30 days and are not used for model training by default | Vendor terms |
| GitHub | Release and update-manifest hosting | Installer downloads by visitors | United States (GitHub infrastructure) | Vendor terms for public release downloads | Vendor terms |
| SMTP2GO | Outbound website email: license code, contact notification, ticket/QA receipt, and live-demo confirmation | Recipient name and email, plus message content (license code, ticket or contact details, calendar invite) | US, Europe, and Australia data centers (SMTP2GO, New Zealand) | SMTP2GO data-processing agreement once executed | DPA pending |
| Gmail | Inbox for replies and messages sent to our email address | Sender name, email, and message content of incoming mail | United States (Google infrastructure) | Google data-processing terms once accepted | DPA pending |
| n8n | Live-demo registration automation | Live-demo name, email, and number | Operator-configured webhook instance | Vendor data-processing terms once executed for the instance | DPA pending |
| Telegram | Optional desktop app integration | Only messages you choose to share | Telegram infrastructure, only when you enable the integration | Vendor terms; integration stays off until you supply your own token | Vendor terms |
| Todoist | Optional task sync integration | Only tasks you sync | Doist infrastructure, only when you enable the integration | Vendor terms; integration stays off until you supply your own token | Vendor terms |
| Web search providers | Optional AI grounding (DuckDuckGo, Tavily, Brave, SearXNG, TinyFish) | Your search query; TinyFish also receives the links of the top two results it returned, so it can read those pages | Search provider infrastructure, or your own SearXNG instance | Vendor terms; off until you turn on web search, and keyed providers use your own key | Vendor terms |
| Google Fonts | Desktop app interface font | Standard font request when the app opens | United States (Google infrastructure) | Vendor terms for a standard webfont request | Vendor terms |
| Google Gemini API | Optional Gemini dictation transcription in the desktop app, using your own API key | Only the dictation audio you record while Gemini dictation is on | United States (Google infrastructure), only when you enable Gemini dictation | Vendor terms; integration stays off until you supply your own key | Vendor terms |
| Paddle.com Market Limited | Payment processing and Merchant of Record for international orders | Buyer name, email, country, order and payment details | United Kingdom | Paddle seller terms; buyers also contract with Paddle.com Market Limited or its affiliates (Paddle.com Inc. in the United States, Paddle.com (Canada) Ltd. in Canada) under Paddle's Buyer Terms and privacy notice | Vendor terms |
Enterprise and EEA customers can review the draft processing terms in our Data Processing Addendum.
Questions about a processor? Write to support.
Telegram, Todoist, and web-search integrations stay off unless you enable them and supply your own keys or tokens.