Sub-processors
What a Sub-processor Is
To run our Services, we rely on a small set of trusted third-party companies. A “sub-processor” is one of those companies that processes personal data on our behalf, under contract, so that we can deliver a specific part of the Services to you, such as hosting, AI inference, sign-in, email delivery, or payments. Each sub-processor is bound by confidentiality and security obligations and may use the data only to provide its service to us.
This page lists the sub-processors we currently use. We keep this list deliberately short, and we share only the minimum data each one needs for its specific purpose. This list may change as our Services evolve, and we will reflect any additions, removals, or changes on this page with reasonable notice. This page is consistent with, and expands on, the sub-processor summary in our Privacy Policy.
Current Sub-processors
The following third parties process data to provide the Services described below:
| Sub-processor | Purpose | Data processed | Region |
|---|---|---|---|
| Cloudflare, Inc. | Hosting, edge network, D1 database, KV, R2 storage, and Workers AI inference | Account data, content, and usage data | Global edge |
| Anthropic, PBC | Claude AI inference for assistant features Processed under commercial terms with no training on your data. | Prompts and content you submit to the assistant | USA |
| Google LLC | Sign-in (OAuth) and Google Calendar integration, only with your explicit consent | Account identifiers and the calendar data you authorize | USA |
| AlphaAI Technologies Inc. (dba Tavily) | Live web search for the Research feature, only when you run a search Zero data retention: search queries are processed to return results and are not saved. | The search query text you submit to Research | USA |
| Resend | Transactional email: sending account and security emails | Email address and message metadata | USA |
| Lemon Squeezy, LLC | Payment processing and Merchant of Record (seller of record) for paid subscriptions Processed under PCI-DSS Level 1. We never receive your full card number. | Your payment details and billing identifiers | USA |
A Note on AI Processing
Our AI features never use OpenAI. The assistant runs on Cloudflare Workers AI and Anthropic Claude only. We do not use your data to train AI models, and these AI processors do not train their models on your inputs or outputs under their commercial terms. Your inputs are processed only to generate the response you requested.
Changes and Notice
We may add, remove, or replace sub-processors as our Services change. When we do, we will update the list above and the effective date at the top of this page. Where required by law or by contract, we will provide additional advance notice so you have the opportunity to review the change.
Contact
If you have questions about our sub-processors or how we handle your data, please contact us at:
White Belt Lab, LLC
Atlanta, Georgia, United States
Email: [email protected]