Subprocessors
Everyone who processes data on our behalf. This list is part of the data processing agreement, and we will tell customers before it changes.
| Who | What they do | What they see |
|---|---|---|
| Cloudflare | Hosting, the database, file storage, and the network in front of it | Everything: conversations, messages, uploaded files, visitor IP addresses |
| Resend | Sending and receiving email | Message content that goes out or comes in by email, and the addresses involved |
| Stripe | Payments and subscriptions | Billing contact and payment details. No conversation data. Card numbers never reach us |
| Apple | Push notifications to the iOS and Mac apps | The notification text, which is a sender name and the start of a message |
What is not on this list
No analytics, advertising or tracking company processes anything here. The widget loads from our own domain and makes no third-party requests. Nothing in a conversation is used to train anything.
Where data is stored
On Cloudflare's network. Storage is not currently pinned to a single region, so a customer with a residency requirement should ask before signing rather than assume.
Changes
Adding a subprocessor means updating this page and telling customers before it takes effect. The DPA will say how much notice; until it is written, ask.