Legal
Products & data recipients
Service providers and subprocessors
Who receives data, for which product, and why.
Last updated:
A provider is listed for its applicable product and feature. Independent payment providers, customer-selected integrations and internal Grid Heap platforms have different roles. A signed DPA determines subprocessor authorization, notices and objection periods; this page does not create a new universal DPA or notice period.
All documented products · 200 provider assignments
Grid Heap
Cloudflare
service provider- Purpose
- Website/application delivery, hosting and security as described for the product.
- Data
- Request metadata and the content needed for the stated hosting/security feature.
- Conditions
- Applies only to the named product and the described feature.
Grid Heap
Adobe Fonts
font delivery provider- Purpose
- Font delivery and font-usage licensing.
- Data
- IP address and browser request information.
- Conditions
- Applies only to the named product and the described feature.
Grid Heap
Fastmail
service provider- Purpose
- Company or product support mailbox hosting.
- Data
- Email addresses, correspondence and attachments you send.
- Conditions
- Company correspondence only; this does not give the provider access to other product accounts.
RShift
Cloudflare
service provider- Purpose
- Website/application delivery, hosting and security as described for the product.
- Data
- Request metadata and the content needed for the stated hosting/security feature.
- Conditions
- Applies only to the named product and the described feature.
RShift
Clerk
service provider- Purpose
- Authentication and session management.
- Data
- Account identifiers, sign-in/session information.
- Conditions
- Applies only to the named product and the described feature.
RShift
Stripe
payment provider; independent controller for its own obligations- Purpose
- Payment processing.
- Data
- Payment/billing details and transaction records.
- Conditions
- Applies only to the named product and the described feature.
RShift
Adobe Fonts
font delivery provider- Purpose
- Delivery and licensing of hosted interface fonts.
- Data
- IP address and browser request information; no application file contents.
- Conditions
- Applies only to the named product and the feature described here.
RShift
Amazon Web Services
service provider- Purpose
- Applicable managed PostgreSQL project databases and transactional email.
- Data
- Account and application records, technical metadata and email content needed for the applicable feature.
- Conditions
- Selected managed database or email features; project publication does not imply that every project has an AWS database.
RShift
Sentry
service provider- Purpose
- Application error and performance monitoring.
- Data
- Technical/error and performance metadata, including identifiers permitted by the product’s diagnostic settings.
- Conditions
- Applies only to the named product and the feature described here.
RShift
PostHog
service provider- Purpose
- Configured product analytics and feature flags in the RShift application.
- Data
- Permitted account/organization identifiers and sanitized feature-use events; no raw workspace content or session replay.
- Conditions
- Only where the application has a configured analytics key and analytics is enabled; the marketing website has a separate configuration.
- Location
- US-hosted endpoint by default; configured endpoint determines the applicable deployment.
RShift
OpenAI
service provider- Purpose
- Selected text, image, embedding or audio model processing through AI Runtime.
- Data
- Inputs and context submitted to the selected model feature and its output.
- Conditions
- Applies only to the named product and the feature described here.
RShift
Microsoft Azure
service provider- Purpose
- Managed privacy-filter compute through AI Runtime.
- Data
- Application content and technical records needed for the applicable feature.
- Conditions
- Only for the enabled managed privacy-filter route; not a claim that all RShift application data is hosted on Azure.
RShift
AI Runtime (airuntime.dev)
internal Grid Heap platform; same legal entity- Purpose
- Internal model routing, selected compute and usage accounting.
- Data
- Applicable model inputs/outputs, authorized configuration and usage records.
- Conditions
- Internal processing within Grid Heap. The external hosting or delivery company is disclosed separately. See AI Runtime privacy information and AI Runtime service providers for downstream model processing.
RShift
TidyMessages
internal Grid Heap platform; same legal entity- Purpose
- Internal email or enabled messaging delivery.
- Data
- Applicable messages, addresses/channel identifiers and delivery records.
- Conditions
- Internal processing within Grid Heap. The external hosting or delivery company is disclosed separately.
TidyAnswer
Cloudflare
service provider- Purpose
- Website/API delivery, security and the application storage or queues used by the selected feature.
- Data
- Technical requests, IP addresses and applicable application content.
- Conditions
- Applies only to the named product and the feature described here.
TidyAnswer
Adobe Fonts
font delivery provider- Purpose
- Delivery and licensing of hosted interface fonts.
- Data
- IP address and browser request information; no application file contents.
- Conditions
- Applies only to the named product and the feature described here.
TidyAnswer
Clerk
service provider- Purpose
- Authentication, session management and applicable organization membership.
- Data
- Account, sign-in, profile and session identifiers.
- Conditions
- Applies only to the named product and the feature described here.
TidyAnswer
Stripe
payment provider; independent controller for its own obligations- Purpose
- Checkout, payments and related billing administration.
- Data
- Billing/contact information, payment credentials and transaction records.
- Conditions
- Applies only to the named product and the feature described here.
TidyAnswer
Twilio
channel provider; role depends on the applicable agreement- Purpose
- Enabled voice, SMS or RCS delivery and related telephone-number services.
- Data
- Message/call content, telephone numbers and delivery metadata.
- Conditions
- Applies only to the named product and the feature described here.
TidyAnswer
Meta (WhatsApp)
channel provider; role depends on the applicable agreement- Purpose
- Enabled WhatsApp messaging.
- Data
- Messages, channel/contact identifiers and delivery status.
- Conditions
- Applies only to the named product and the feature described here.
TidyAnswer
Amazon Web Services
service provider- Purpose
- Applicable enterprise cloud-cell infrastructure and enabled email delivery.
- Data
- Account and application records, technical metadata and email content needed for the applicable feature.
- Conditions
- Only an AWS-hosted workspace or configured AWS email feature; other proposed cloud editions are not automatically included.
TidyAnswer
Sentry
service provider- Purpose
- Application error and performance monitoring.
- Data
- Technical/error and performance metadata, including identifiers permitted by the product’s diagnostic settings.
- Conditions
- Applies only to the named product and the feature described here.
TidyAnswer
Apple (APNs)
feature provider- Purpose
- Push notifications to registered Apple devices.
- Data
- Device push tokens and the notification payload needed for delivery.
- Conditions
- Only for a registered Apple device and an enabled notification feature.
TidyAnswer
AI Runtime (airuntime.dev)
internal Grid Heap platform; same legal entity- Purpose
- Internal model routing, selected compute and usage accounting.
- Data
- Applicable model inputs/outputs, authorized configuration and usage records.
- Conditions
- Internal processing within Grid Heap. The external hosting or delivery company is disclosed separately. See AI Runtime privacy information and AI Runtime service providers for downstream model processing.
TidyAnswer
TidyMessages
internal Grid Heap platform; same legal entity- Purpose
- Internal email or enabled messaging delivery.
- Data
- Applicable messages, addresses/channel identifiers and delivery records.
- Conditions
- Internal processing within Grid Heap. The external hosting or delivery company is disclosed separately.
TidyMessages
Cloudflare
service provider- Purpose
- Public website/help delivery and applicable edge integration boundaries.
- Data
- Public-site technical requests and authorized edge integration payloads; the production messaging application runs on Azure.
- Conditions
- Applies only to the named product and the feature described here.
TidyMessages
Adobe Fonts
font delivery provider- Purpose
- Delivery and licensing of hosted interface fonts.
- Data
- IP address and browser request information; no application file contents.
- Conditions
- Applies only to the named product and the feature described here.
TidyMessages
Microsoft Azure
service provider- Purpose
- Production Container Apps, PostgreSQL, attachment storage, Service Bus, secrets and operational monitoring.
- Data
- Encrypted messaging/customer records, attachments, delivery metadata and minimized operational records.
- Conditions
- Applies only to the named product and the feature described here.
TidyMessages
Clerk
service provider- Purpose
- Authentication, session management and applicable organization membership.
- Data
- Account, sign-in, profile and session identifiers.
- Conditions
- Applies only to the named product and the feature described here.
TidyMessages
Amazon Web Services
service provider- Purpose
- Amazon SES v2 email transport.
- Data
- Email recipient/sender addresses, message content and delivery records.
- Conditions
- Email connections configured for SES; AWS is not listed as the production messaging application host.
TidyMessages
Meta (WhatsApp)
channel provider; role depends on the applicable agreement- Purpose
- Enabled WhatsApp messaging.
- Data
- Messages, channel/contact identifiers and delivery status.
- Conditions
- Only when the customer’s approved WhatsApp connection is enabled.
Speech Name
Cloudflare
service provider- Purpose
- Website/API delivery, security and the application storage or queues used by the selected feature.
- Data
- Technical requests, IP addresses and applicable application content.
- Conditions
- Applies only to the named product and the feature described here.
Speech Name
Adobe Fonts
font delivery provider- Purpose
- Delivery and licensing of hosted interface fonts.
- Data
- IP address and browser request information; no application file contents.
- Conditions
- Applies only to the named product and the feature described here.
Speech Name
Clerk
service provider- Purpose
- Authentication, session management and applicable organization membership.
- Data
- Account, sign-in, profile and session identifiers.
- Conditions
- Applies only to the named product and the feature described here.
Speech Name
Microsoft Azure
service provider- Purpose
- Separate Direct/Azure application deployments: Container Apps, PostgreSQL, Blob/Queue Storage, Key Vault and monitoring; Microsoft Marketplace commerce for that edition.
- Data
- Application content and technical records needed for the applicable feature.
- Conditions
- Direct or Azure application deployment and applicable managed compute; Marketplace processing applies only to Marketplace purchases.
- Location
- Azure application edition: West US 3; compute and commerce are independently selected.
Speech Name
Amazon Web Services
service provider- Purpose
- AWS-edition Fargate, RDS PostgreSQL, S3, SQS and secrets; AWS Marketplace entitlement and metering.
- Data
- Account and application records, technical metadata and email content needed for the applicable feature.
- Conditions
- AWS edition and selected managed AWS compute. Marketplace commerce and application hosting have distinct roles.
Speech Name
Stripe
payment provider; independent controller for its own obligations- Purpose
- Direct checkout, billing/customer portal and enabled speaker payouts through Stripe Connect.
- Data
- Billing/contact information, payment credentials and transaction records.
- Conditions
- Direct-channel payments or Stripe Connect payouts. AWS/Microsoft Marketplace purchases use their respective commerce operators.
Speech Name
AI Runtime (airuntime.dev)
internal Grid Heap platform; same legal entity- Purpose
- Internal model routing, selected compute and usage accounting.
- Data
- Applicable model inputs/outputs, authorized configuration and usage records.
- Conditions
- Internal processing within Grid Heap. The external hosting or delivery company is disclosed separately. See AI Runtime privacy information and AI Runtime service providers for downstream model processing.
Planner.li
AI Runtime (airuntime.dev)
internal Grid Heap platform; same legal entity- Purpose
- Grid Heap internal model routing gateway.
- Data
- Applicable selected model input and usage records.
- Conditions
- Internal Grid Heap model service for enabled privacy filtering, draft translation and subscription extraction. Downstream model processing is described centrally for AI Runtime. See AI Runtime privacy information and AI Runtime service providers for downstream model processing.
Planner.li
Cloudflare
service provider- Purpose
- Website/API delivery, account/billing records and enabled encrypted sharing snapshots.
- Data
- Account/technical records and encrypted sharing payloads; personal iCloud sync uses Apple.
- Conditions
- Hosted sharing and account services only. Personal account sync and multi-user sharing have separate storage paths.
Planner.li
Clerk
service provider- Purpose
- Authentication
- Data
- Account/sign-in identifiers
- Conditions
- Applies only to the named product and the described feature.
Planner.li
PayPal
payment provider- Purpose
- Subscriptions
- Data
- Billing and transaction records
- Conditions
- Applies only to the named product and the described feature.
Planner.li
Amazon Web Services (SES)
service provider- Purpose
- Transactional email
- Data
- Email address and message content
- Conditions
- Applies only to the named product and the described feature.
Planner.li
Sentry
service provider- Purpose
- Diagnostics
- Data
- Diagnostic/app/account records
- Conditions
- Applies only to the named product and the described feature.
Planner.li
Adobe Fonts
font delivery provider- Purpose
- Desktop interface font delivery
- Data
- IP address and browser request information
- Conditions
- Applies only to the named product and the described feature.
Planner.li
Apple (WeatherKit)
feature provider- Purpose
- Selected weather feature
- Data
- Coarse location/place reference
- Conditions
- Applies only to the named product and the described feature.
Planner.li
Apple (iCloud/CloudKit)
user-selected sync provider under the applicable Apple account terms- Purpose
- User-selected personal account synchronization in iCloud.
- Data
- Account sync records and encrypted content submitted by the enabled sync feature.
- Conditions
- Only when available iCloud synchronization is enabled for the user’s Apple account; a CloudKit production rollout is separate from hosted sharing.
Enola
Cloudflare
service provider- Purpose
- Website/application delivery, hosting and security as described for the product.
- Data
- Request metadata and the content needed for the stated hosting/security feature.
- Conditions
- Applies only to the named product and the described feature.
Enola
Adobe Fonts
font delivery provider- Purpose
- Font delivery and font-usage licensing.
- Data
- IP address and browser request information.
- Conditions
- Applies only to the named product and the described feature.
Enola
Clerk
service provider- Purpose
- Authentication and session management.
- Data
- Account identifiers, sign-in/session information.
- Conditions
- Applies only to the named product and the described feature.
Enola
Fireworks AI
service provider- Purpose
- Hosting selected DeepSeek text model requests through AI Runtime.
- Data
- Messages and context submitted to that model route; this is separate from the OpenAI transcription route.
- Conditions
- Only a selected Fireworks-hosted model route, including the documented DeepSeek peak/fallback paths. Model branding alone does not identify the host.
Enola
Twilio
service provider- Purpose
- Enabled SMS/messaging channel delivery.
- Data
- Messages, telephone numbers and delivery status.
- Conditions
- Applies only to the named product and the described feature.
Enola
Meta (WhatsApp)
channel provider; role depends on feature and applicable agreement- Purpose
- Enabled WhatsApp channel delivery.
- Data
- Messages, channel/contact identifiers and delivery status.
- Conditions
- Applies only to the named product and the described feature.
Enola
Google (RCS)
channel provider; role depends on applicable agreement- Purpose
- RCS platform delivery through the enabled RCS channel.
- Data
- Messages and channel identifiers.
- Conditions
- RCS platform processing for the selected channel. Twilio supplies the direct RCS transport; this is not a separate direct Google API integration claim.
Enola
Fastmail
service provider- Purpose
- Enola mailbox hosting and email delivery.
- Data
- Email content and addresses.
- Conditions
- Applies only to the named product and the described feature.
Enola
AI Runtime (airuntime.dev)
internal Grid Heap platform; same legal entity- Purpose
- Grid Heap internal model routing gateway.
- Data
- Applicable selected model input and usage records.
- Conditions
- Downstream external providers must be disclosed separately; an internal gateway is not a substitute for their names. See AI Runtime privacy information and AI Runtime service providers for downstream model processing.
Enola
TidyMessages
internal Grid Heap platform; same legal entity- Purpose
- Grid Heap internal messaging/storage platform.
- Data
- Applicable messages, channel identifiers and delivery records.
- Conditions
- Applies only to the named product and the described feature.
Enola
DeepSeek
service provider- Purpose
- Selected DeepSeek models through the direct provider API.
- Data
- Model request inputs, context and output.
- Conditions
- Only a direct DeepSeek API route. A DeepSeek model served by Fireworks sends model data to Fireworks instead; route and fallback selection determine the recipient.
Enola
OpenAI
service provider- Purpose
- Enabled OpenAI assistant or transcription routes through AI Runtime.
- Data
- Inputs and context submitted to the selected model feature and its output.
- Conditions
- Selected assistant/voice route and fallback only; the active route determines the recipient.
Enola
Linq
channel provider; role depends on the applicable agreement- Purpose
- Enabled iMessage, SMS or RCS delivery through the Linq connection.
- Data
- Messages, attachments, telephone/channel identifiers and delivery metadata.
- Conditions
- Only an enabled Linq-backed connection. TidyMessages is a separate internally operated channel platform, not the Linq vendor.
Enola
AgentMQ
internal Grid Heap platform; same legal entity- Purpose
- Internal authorized workflow and tool execution.
- Data
- Authorized task inputs/outputs, approvals and execution records.
- Conditions
- Internal processing within Grid Heap. The external hosting or delivery company is disclosed separately.
Dueglow
Cloudflare
service provider- Purpose
- Website/API delivery, security, public content caching and applicable backend infrastructure.
- Data
- Technical requests, IP addresses and optional cover/catalog lookup parameters. The Android closed test does not upload the local event, photo or travel library.
- Conditions
- Applies only to the named product and the feature described here.
Dueglow
Clerk
service provider- Purpose
- Authentication, session management and applicable organization membership.
- Data
- Account, sign-in, profile and session identifiers.
- Conditions
- Only in Dueglow releases with account features enabled. Disabled and not initialized in the Android closed-test build.
Dueglow
Amazon Web Services
service provider- Purpose
- AWS PostgreSQL content hosting through the RShift database gateway.
- Data
- Applicable service content and technical database records; this is not a claim that all on-device plans are uploaded.
- Conditions
- Applicable backend content storage; the Android closed test does not synchronize its local event library to this database.
Dueglow
Sentry
service provider- Purpose
- Application error and performance monitoring.
- Data
- Technical/error and performance metadata, including identifiers permitted by the product’s diagnostic settings.
- Conditions
- Only when Sentry is configured for the applicable backend or enabled release. No Sentry client SDK runs in the Android closed-test app; backend technical diagnostics may still apply to optional API requests.
Dueglow
PostHog
service provider- Purpose
- Feature-use analytics and product diagnostics.
- Data
- Minimized feature events and permitted account/device identifiers; no raw customer content.
- Conditions
- Only when PostHog is configured for the applicable backend or enabled release. No PostHog client SDK runs in the Android closed-test app; backend technical diagnostics may still apply to optional API requests.
Dueglow
AI Runtime (airuntime.dev)
internal Grid Heap platform; same legal entity- Purpose
- Internal model routing, selected compute and usage accounting.
- Data
- Applicable model inputs/outputs, authorized configuration and usage records.
- Conditions
- Internal Grid Heap processing only for enabled authorized workflows. Assistant and AI place discovery, preview and story generation are disabled in the Android closed-test build; it sends no model prompts or workflow requests. See AI Runtime privacy information and AI Runtime service providers for downstream model processing.
Dueglow
AgentMQ
internal Grid Heap platform; same legal entity- Purpose
- Internal authorized workflow and tool execution.
- Data
- Authorized task inputs/outputs, approvals and execution records.
- Conditions
- Internal Grid Heap processing only for enabled authorized workflows. Assistant and AI place discovery, preview and story generation are disabled in the Android closed-test build; it sends no model prompts or workflow requests.
AgentMQ
Cloudflare
service provider- Purpose
- DNS for the AWS-hosted console/API and delivery of the independently hosted help center.
- Data
- DNS queries and help-center technical requests; application execution and PostgreSQL records are hosted by AWS.
- Conditions
- Applies only to the named product and the described feature.
AgentMQ
Adobe Fonts
font delivery provider- Purpose
- Font delivery and font-usage licensing.
- Data
- IP address and browser request information.
- Conditions
- Applies only to the named product and the described feature.
AgentMQ
Amazon Web Services
service provider- Purpose
- Production application execution, PostgreSQL, storage and authorized SES email sending.
- Data
- Account and application records, technical metadata and email content needed for the applicable feature.
- Conditions
- Applies only to the named product and the feature described here.
- Location
- Production application and database: US East (Northern Virginia), as recorded in the deployment receipt; other selected service locations vary.
AgentMQ
Clerk
service provider- Purpose
- Authentication, session management and applicable organization membership.
- Data
- Account, sign-in, profile and session identifiers.
- Conditions
- Applies only to the named product and the feature described here.
Agentic.Pay
Cloudflare
service provider- Purpose
- Website/application delivery, hosting and security as described for the product.
- Data
- Request metadata and the content needed for the stated hosting/security feature.
- Conditions
- Applies only to the named product and the described feature.
Agentic.Pay
Adobe Fonts
font delivery provider- Purpose
- Font delivery and font-usage licensing.
- Data
- IP address and browser request information.
- Conditions
- Applies only to the named product and the described feature.
Agentic.Pay
PayPal
payment provider; independent controller for its own obligations- Purpose
- Historical order reconciliation, disputes and refunds.
- Data
- Payment/account information and transaction records.
- Conditions
- The former PayPal storefront is closed to new sales. This recipient applies to retained historical payment records.
Inference.Pay
Cloudflare
service provider- Purpose
- Website/application delivery, hosting and security as described for the product.
- Data
- Request metadata and the content needed for the stated hosting/security feature.
- Conditions
- Applies only to the named product and the described feature.
Inference.Pay
Adobe Fonts
font delivery provider- Purpose
- Font delivery and font-usage licensing.
- Data
- IP address and browser request information.
- Conditions
- Applies only to the named product and the described feature.
Inference.Pay
PayPal
payment provider; independent controller for its own obligations- Purpose
- Payment processing.
- Data
- Payment/billing details and transaction records.
- Conditions
- Applies only to the named product and the described feature.
Inference.Pay
Clerk
service provider- Purpose
- Authentication, session management and applicable organization membership.
- Data
- Account, sign-in, profile and session identifiers.
- Conditions
- Applies only to the named product and the feature described here.
Inference.Pay
Stripe
payment provider; independent controller for its own obligations- Purpose
- Checkout, payments and related billing administration.
- Data
- Billing/contact information, payment credentials and transaction records.
- Conditions
- Applies only to the named product and the feature described here.
Inference.Pay
Sentry
service provider- Purpose
- Application error and performance monitoring.
- Data
- Technical/error and performance metadata, including identifiers permitted by the product’s diagnostic settings.
- Conditions
- Applies only to the named product and the feature described here.
Inference.Pay
Microsoft Azure
service provider- Purpose
- Selected managed GPU deployments through AI Runtime.
- Data
- Deployment models/images/configuration, endpoint traffic and operational logs.
- Conditions
- Only a deployment actually assigned to Azure. Supported Modal, Fireworks and Vast.ai adapters are not a claim that all are active for every deployment.
Inference.Pay
AI Runtime (airuntime.dev)
internal Grid Heap platform; same legal entity- Purpose
- Internal model routing, selected compute and usage accounting.
- Data
- Applicable model inputs/outputs, authorized configuration and usage records.
- Conditions
- Internal processing within Grid Heap. The external hosting or delivery company is disclosed separately. See AI Runtime privacy information and AI Runtime service providers for downstream model processing.
Inference.Pay
RShift Sites
internal Grid Heap platform; same legal entity- Purpose
- Internal product website/API hosting and applicable project storage.
- Data
- Applicable website/API requests, project records and support submissions.
- Conditions
- Internal processing within Grid Heap. The external hosting or delivery company is disclosed separately.
Bots.Pay
Cloudflare
service provider- Purpose
- Website/application delivery, hosting and security as described for the product.
- Data
- Request metadata and the content needed for the stated hosting/security feature.
- Conditions
- Applies only to the named product and the described feature.
Bots.Pay
Adobe Fonts
font delivery provider- Purpose
- Font delivery and font-usage licensing.
- Data
- IP address and browser request information.
- Conditions
- Applies only to the named product and the described feature.
Bots.Pay
Clerk
service provider- Purpose
- Authentication and session management.
- Data
- Account identifiers, sign-in/session information.
- Conditions
- Applies only to the named product and the described feature.
Bots.Pay
Stripe
payment provider; independent controller for its own obligations- Purpose
- Payment processing.
- Data
- Payment/billing details and transaction records.
- Conditions
- Applies only to the named product and the described feature.
Bots.Pay
PayPal
payment provider; independent controller for its own obligations- Purpose
- Payment processing.
- Data
- Payment/billing details and transaction records.
- Conditions
- Applies only to the named product and the described feature.
Bots.Pay
Amazon Web Services
service provider- Purpose
- Bot compute (Fargate), snapshots (S3) and operational records.
- Data
- Bot workspaces, repository/files, account/billing records.
- Conditions
- Applies only to the named product and the described feature.
- Location
- Current Bots notice identifies EU Frankfurt for compute and snapshots; other processing locations require confirmation.
Bots.Pay
Sentry
service provider- Purpose
- Error monitoring through AI Runtime and RShift Sites.
- Data
- Technical/error metadata under the documented stripping configuration.
- Conditions
- Applies only to the named product and the described feature.
Bots.Pay
Twilio
service provider- Purpose
- Enabled SMS/messaging channel delivery.
- Data
- Messages, telephone numbers and delivery status.
- Conditions
- Applies only to the named product and the described feature.
Bots.Pay
Meta (WhatsApp)
channel provider; role depends on feature and applicable agreement- Purpose
- Enabled WhatsApp channel delivery.
- Data
- Messages, channel/contact identifiers and delivery status.
- Conditions
- Applies only to the named product and the described feature.
Bots.Pay
AI Runtime (airuntime.dev)
internal Grid Heap platform; same legal entity- Purpose
- Grid Heap internal model routing gateway.
- Data
- Applicable selected model input and usage records.
- Conditions
- Downstream external providers must be disclosed separately; an internal gateway is not a substitute for their names. See AI Runtime privacy information and AI Runtime service providers for downstream model processing.
Bots.Pay
AgentMQ
internal Grid Heap platform; same legal entity- Purpose
- Grid Heap internal tool execution.
- Data
- Tool inputs/outputs and usage.
- Conditions
- Applies only to the named product and the described feature.
Bots.Pay
TidyMessages
internal Grid Heap platform; same legal entity- Purpose
- Grid Heap internal messaging/storage platform.
- Data
- Applicable messages, channel identifiers and delivery records.
- Conditions
- Applies only to the named product and the described feature.
Bots.Pay
Microsoft Azure
service provider- Purpose
- Applicable internal AI Runtime managed model/privacy compute.
- Data
- Application content and technical records needed for the applicable feature.
- Conditions
- Only when the requested Bot route uses that managed deployment; Bot workspace compute and snapshots are on AWS.
Bots.Pay
DeepSeek
service provider- Purpose
- Model inference for all Bots.Pay model requests, serving DeepSeek V4.1 Flash through the official API and the internal AI Runtime gateway.
- Data
- Instructions, conversation context, repository code and file contents included in a model request; generated outputs and request/usage metadata.
- Conditions
- Hangzhou DeepSeek Artificial Intelligence Co., Ltd. receives the model-request data needed to generate responses through its official API. DeepSeek privacy information: https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html.
- Location
- DeepSeek's privacy notice describes processing and storage in the People's Republic of China.
AI Evals
Cloudflare
service provider- Purpose
- Website/application delivery, hosting and security as described for the product.
- Data
- Request metadata and the content needed for the stated hosting/security feature.
- Conditions
- Applies only to the named product and the described feature.
AI Evals
Adobe Fonts
font delivery provider- Purpose
- Font delivery and font-usage licensing.
- Data
- IP address and browser request information.
- Conditions
- Applies only to the named product and the described feature.
AI Agent Pay
Cloudflare
service provider- Purpose
- Website/application delivery, hosting and security as described for the product.
- Data
- Request metadata and the content needed for the stated hosting/security feature.
- Conditions
- Applies only to the named product and the described feature.
AI Agent Pay
Adobe Fonts
font delivery provider- Purpose
- Font delivery and font-usage licensing.
- Data
- IP address and browser request information.
- Conditions
- Applies only to the named product and the described feature.
AI Agent Pay
Clerk
service provider- Purpose
- Authentication and session management.
- Data
- Account identifiers, sign-in/session information.
- Conditions
- Applies only to the named product and the described feature.
AI Agent Pay
Amazon Web Services
service provider- Purpose
- Applicable product records in RShift Sites managed PostgreSQL.
- Data
- Applicable account/application records and operational metadata.
- Conditions
- Product database processing through the hosted service; customer-selected external databases have their own scope.
AI Agent Pay
AgentMQ
internal Grid Heap platform; same legal entity- Purpose
- Internal authorized workflow and tool execution.
- Data
- Authorized task inputs/outputs, approvals and execution records.
- Conditions
- Internal processing within Grid Heap. The external hosting or delivery company is disclosed separately.
AI Agent Pay
TidyMessages
internal Grid Heap platform; same legal entity- Purpose
- Internal email or enabled messaging delivery.
- Data
- Applicable messages, addresses/channel identifiers and delivery records.
- Conditions
- Internal processing within Grid Heap. The external hosting or delivery company is disclosed separately.
AI Agent Pay
RShift Sites
internal Grid Heap platform; same legal entity- Purpose
- Internal product website/API hosting and applicable project storage.
- Data
- Applicable website/API requests, project records and support submissions.
- Conditions
- Internal processing within Grid Heap. The external hosting or delivery company is disclosed separately.
4dub
Adobe Fonts
font delivery provider- Purpose
- Font delivery and font-usage licensing.
- Data
- IP address and browser request information.
- Conditions
- Applies only to the named product and the described feature.
4dub
Google / Microsoft / Apple
customer-selected identity provider; independent processing under its own notice- Purpose
- User-selected sign-in.
- Data
- Email address, account identifier and supported profile fields.
- Conditions
- Only the sign-in method the user selects. No access to email, files, contacts or calendars is claimed.
4dub
Cloudflare
service provider- Purpose
- Worker API and website delivery, private R2 media, queues/workflows, backups and Hyperdrive connections.
- Data
- Uploaded/generated media, application records and technical requests.
- Conditions
- Applies only to the named product and the feature described here.
4dub
Microsoft Azure
service provider- Purpose
- Speech transcription, translation and stock-voice synthesis; Azure AI Foundry text rewrites through AI Runtime.
- Data
- Submitted media, speech/transcripts, rewrite text and generated output.
- Conditions
- Applies only to the named product and the feature described here.
- Location
- Speech resource selection includes East US, East US 2, West US 2 and West Europe. Text rewrites use an Azure GlobalStandard deployment; this is not a single-region processing promise.
4dub
Clerk
service provider- Purpose
- Authentication, session management and applicable organization membership.
- Data
- Account, sign-in, profile and session identifiers.
- Conditions
- Applies only to the named product and the feature described here.
4dub
Stripe
payment provider; independent controller for its own obligations- Purpose
- Checkout, payment administration and merchant-of-record services through Stripe Managed Payments.
- Data
- Billing/contact information, payment credentials and transaction records.
- Conditions
- The checkout and receipt identify the merchant of record; historical transactions retain their applicable payment records.
4dub
Sentry
service provider- Purpose
- Application error and performance monitoring.
- Data
- Redacted browser/API errors, timing and permitted account IDs; private media URLs, cookies and headers are removed.
- Conditions
- Applies only to the named product and the feature described here.
4dub
PostHog
service provider- Purpose
- Production feature and page-use analytics.
- Data
- Minimized events and signed-in account IDs; memory-only anonymous identifiers. Email, media, private URLs and session replay are excluded.
- Conditions
- Production builds only; analytics persistence is in memory rather than cookies or localStorage.
- Location
- US-hosted PostHog endpoint.
4dub
Amazon Web Services
service provider- Purpose
- RShift Sites PostgreSQL hosting, protected operational configuration and Amazon SES email delivery.
- Data
- Account, project metadata and billing records; email addresses and support/service message content. Media storage is on Cloudflare R2.
- Conditions
- Applies only to the named product and the feature described here.
- Location
- Documented database and SES: US East (Northern Virginia).
4dub
Fastmail
service provider- Purpose
- Company or product support mailbox hosting.
- Data
- Email addresses, correspondence and attachments you send.
- Conditions
- Applies only to the named product and the feature described here.
4dub
AI Runtime (airuntime.dev)
internal Grid Heap platform; same legal entity- Purpose
- Internal model routing, selected compute and usage accounting.
- Data
- Applicable model inputs/outputs, authorized configuration and usage records.
- Conditions
- Internal processing within Grid Heap. The external hosting or delivery company is disclosed separately. See AI Runtime privacy information and AI Runtime service providers for downstream model processing.
4dub
AgentMQ
internal Grid Heap platform; same legal entity- Purpose
- Internal authorized workflow and tool execution.
- Data
- Authorized task inputs/outputs, approvals and execution records.
- Conditions
- Internal processing within Grid Heap. The external hosting or delivery company is disclosed separately.
4dub
TidyMessages
internal Grid Heap platform; same legal entity- Purpose
- Internal email or enabled messaging delivery.
- Data
- Applicable messages, addresses/channel identifiers and delivery records.
- Conditions
- Internal processing within Grid Heap. The external hosting or delivery company is disclosed separately.
4dub
RShift Sites
internal Grid Heap platform; same legal entity- Purpose
- Internal product website/API hosting and applicable project storage.
- Data
- Applicable website/API requests, project records and support submissions.
- Conditions
- Internal processing within Grid Heap. The external hosting or delivery company is disclosed separately.
AIRuntime
Cloudflare
service provider- Purpose
- Website/API delivery, security and the application storage or queues used by the selected feature.
- Data
- Technical requests, IP addresses and applicable application content.
- Conditions
- Applies only to the named product and the feature described here.
AIRuntime
Adobe Fonts
font delivery provider- Purpose
- Delivery and licensing of hosted interface fonts.
- Data
- IP address and browser request information; no application file contents.
- Conditions
- Applies only to the named product and the feature described here.
AIRuntime
Clerk
service provider- Purpose
- Authentication, session management and applicable organization membership.
- Data
- Account, sign-in, profile and session identifiers.
- Conditions
- Applies only to the named product and the feature described here.
AIRuntime
Microsoft Azure
service provider- Purpose
- Production Azure PostgreSQL, selected GPU/model deployment and managed privacy-filter compute.
- Data
- Application content and technical records needed for the applicable feature.
- Conditions
- Applicable platform database or selected managed Azure model deployment; other cloud editions remain distinct.
AIRuntime
Amazon Web Services
service provider- Purpose
- Selected AWS runtime edition, deployment/storage infrastructure or transactional email.
- Data
- Account and application records, technical metadata and email content needed for the applicable feature.
- Conditions
- Only the selected AWS-hosted feature or configured email transport.
AIRuntime
Stripe
payment provider; independent controller for its own obligations- Purpose
- Checkout, payments and related billing administration.
- Data
- Billing/contact information, payment credentials and transaction records.
- Conditions
- Applies only to the named product and the feature described here.
AIRuntime
Sentry
service provider- Purpose
- Application error and performance monitoring.
- Data
- Technical/error and performance metadata, including identifiers permitted by the product’s diagnostic settings.
- Conditions
- Applies only to the named product and the feature described here.
AIRuntime
OpenAI
service provider- Purpose
- Selected text, image, embedding or audio model processing through AI Runtime.
- Data
- Inputs and context submitted to the selected model feature and its output.
- Conditions
- Applies only to the named product and the feature described here.
AIRuntime
DeepSeek
service provider- Purpose
- Selected DeepSeek models through the direct provider API.
- Data
- Model request inputs, context and output.
- Conditions
- Only a direct DeepSeek API route. A DeepSeek model served by Fireworks sends model data to Fireworks instead; route and fallback selection determine the recipient.
AIRuntime
Fireworks AI
service provider- Purpose
- Hosting selected model requests through AI Runtime.
- Data
- Model request inputs, context and output.
- Conditions
- Only a selected Fireworks-hosted model route, including the documented DeepSeek peak/fallback paths. Model branding alone does not identify the host.
AIRuntime
Moonshot AI
service provider- Purpose
- Selected Kimi model requests through AI Runtime.
- Data
- Model request inputs, context and output.
- Conditions
- Only selected Kimi routes with configured central credentials; not an authorization for every model in the adapter catalogue.
nnu.us
Cloudflare
service provider- Purpose
- Website/API delivery, security and the application storage or queues used by the selected feature.
- Data
- Technical requests, IP addresses and applicable application content.
- Conditions
- Applies only to the named product and the feature described here.
nnu.us
Adobe Fonts
font delivery provider- Purpose
- Delivery and licensing of hosted interface fonts.
- Data
- IP address and browser request information; no application file contents.
- Conditions
- Applies only to the named product and the feature described here.
nnu.us
Clerk
service provider- Purpose
- Authentication, session management and applicable organization membership.
- Data
- Account, sign-in, profile and session identifiers.
- Conditions
- Applies only to the named product and the feature described here.
nnu.us
Stripe
payment provider; independent controller for its own obligations- Purpose
- Checkout, payments and related billing administration.
- Data
- Billing/contact information, payment credentials and transaction records.
- Conditions
- Applies only to the named product and the feature described here.
nnu.us
Amazon Web Services
service provider- Purpose
- Applicable product records in RShift Sites managed PostgreSQL.
- Data
- Applicable account/application records and operational metadata.
- Conditions
- Product database processing through the hosted service; customer-selected external databases have their own scope.
nnu.us
AI Runtime (airuntime.dev)
internal Grid Heap platform; same legal entity- Purpose
- Internal model routing, selected compute and usage accounting.
- Data
- Applicable model inputs/outputs, authorized configuration and usage records.
- Conditions
- Internal Grid Heap model service for the requested AI features. Downstream model processing is described centrally for AI Runtime. See AI Runtime privacy information and AI Runtime service providers for downstream model processing.
TrainShell
Cloudflare
service provider- Purpose
- Website/API delivery, security and the application storage or queues used by the selected feature.
- Data
- Technical requests, IP addresses and applicable application content.
- Conditions
- Applies only to the named product and the feature described here.
TrainShell
Clerk
service provider- Purpose
- Authentication, session management and applicable organization membership.
- Data
- Account, sign-in, profile and session identifiers.
- Conditions
- Applies only to the named product and the feature described here.
TrainShell
Amazon Web Services
service provider- Purpose
- Managed terminal relay and hosted desktop/compute features.
- Data
- Approved session/connection records, relay traffic and the selected managed desktop workspace.
- Conditions
- Only the managed AWS relay/desktop or selected compute feature; a user’s own remote host is a separately instructed destination.
TrainShell
Stripe
payment provider; independent controller for its own obligations- Purpose
- Checkout, payments and related billing administration.
- Data
- Billing/contact information, payment credentials and transaction records.
- Conditions
- Applies only to the named product and the feature described here.
TrainShell
Sentry
service provider- Purpose
- Application error and performance monitoring.
- Data
- Technical/error and performance metadata, including identifiers permitted by the product’s diagnostic settings.
- Conditions
- Only when Sentry diagnostics/analytics are enabled and configured for the applicable product release.
TrainShell
PostHog
service provider- Purpose
- Feature-use analytics and product diagnostics.
- Data
- Minimized feature events and permitted account/device identifiers; no raw customer content.
- Conditions
- Only when PostHog diagnostics/analytics are enabled and configured for the applicable product release.
heap.page
Cloudflare
service provider- Purpose
- Website/API delivery, security and the application storage or queues used by the selected feature.
- Data
- Technical requests, IP addresses and applicable application content.
- Conditions
- Applies only to the named product and the feature described here.
heap.page
Adobe Fonts
font delivery provider- Purpose
- Delivery and licensing of hosted interface fonts.
- Data
- IP address and browser request information; no application file contents.
- Conditions
- Applies only to the named product and the feature described here.
heap.page
Clerk
service provider- Purpose
- Authentication, session management and applicable organization membership.
- Data
- Account, sign-in, profile and session identifiers.
- Conditions
- Applies only to the named product and the feature described here.
heap.page
Stripe
payment provider; independent controller for its own obligations- Purpose
- Checkout, payments and related billing administration.
- Data
- Billing/contact information, payment credentials and transaction records.
- Conditions
- Only enabled hosted checkout/payment features; billing launch remains controlled separately from public browsing.
heap.page
Amazon Web Services
service provider- Purpose
- Applicable product records in RShift Sites managed PostgreSQL.
- Data
- Applicable account/application records and operational metadata.
- Conditions
- Product database processing through the hosted service; customer-selected external databases have their own scope.
heap.page
OpenAI
service provider- Purpose
- Requested image/headshot generation and OpenAI research routes through AI Runtime.
- Data
- The image, photo, instructions or research context submitted to the requested feature.
- Conditions
- Only the enabled requested feature route; public browsing alone does not submit a visitor’s photo to a model.
heap.page
Bright Data
feature provider- Purpose
- Retrieval of public pages or search results for the requested research feature.
- Data
- Requested public URL/search terms and technical request metadata; no account credentials or private messages.
- Conditions
- Enabled public-page/search research with a configured provider route.
heap.page
AI Runtime (airuntime.dev)
internal Grid Heap platform; same legal entity- Purpose
- Internal model routing, selected compute and usage accounting.
- Data
- Applicable model inputs/outputs, authorized configuration and usage records.
- Conditions
- Internal processing within Grid Heap. The external hosting or delivery company is disclosed separately. See AI Runtime privacy information and AI Runtime service providers for downstream model processing.
heap.page
RShift Sites
internal Grid Heap platform; same legal entity- Purpose
- Internal product website/API hosting and applicable project storage.
- Data
- Applicable website/API requests, project records and support submissions.
- Conditions
- Internal processing within Grid Heap. The external hosting or delivery company is disclosed separately.
Outseek
Cloudflare
service provider- Purpose
- Website/API delivery, security and the application storage or queues used by the selected feature.
- Data
- Technical requests, IP addresses and applicable application content.
- Conditions
- Applies only to the named product and the feature described here.
Outseek
Adobe Fonts
font delivery provider- Purpose
- Delivery and licensing of hosted interface fonts.
- Data
- IP address and browser request information; no application file contents.
- Conditions
- Applies only to the named product and the feature described here.
Outseek
Clerk
service provider- Purpose
- Authentication, session management and applicable organization membership.
- Data
- Account, sign-in, profile and session identifiers.
- Conditions
- Applies only to the named product and the feature described here.
Outseek
Stripe
payment provider; independent controller for its own obligations- Purpose
- Checkout, payments and related billing administration.
- Data
- Billing/contact information, payment credentials and transaction records.
- Conditions
- Enabled fixed sponsorship and offer-campaign purchases. Retired PayPal ingress and disabled Founding Builder checkout are not current payment flows.
Outseek
Amazon Web Services
service provider- Purpose
- Production Amazon SES delivery of consented offer campaigns and enabled statistics email.
- Data
- Recipient email address and requested/consented message content.
- Conditions
- Offer-campaign email is documented as enabled; statistics email has its own launch gate. Disabled member/lead notification paths are not included.
Outseek
Bright Data
feature provider- Purpose
- Public product/trend page collection through authorized provider operations.
- Data
- Public collection URLs/search terms and public page payloads; customer email/contact lists are not sent for crawling.
- Conditions
- Applies only to the named product and the feature described here.
Outseek
OpenAI
service provider- Purpose
- Enabled demand/review translation, need-writing and matching routes.
- Data
- Submitted demand/review text and permitted public product context.
- Conditions
- Only the requested, enabled AI route; inactive recommendation-email features do not create additional model processing.
Outseek
AI Runtime (airuntime.dev)
internal Grid Heap platform; same legal entity- Purpose
- Internal model routing, selected compute and usage accounting.
- Data
- Applicable model inputs/outputs, authorized configuration and usage records.
- Conditions
- Internal processing within Grid Heap. The external hosting or delivery company is disclosed separately. See AI Runtime privacy information and AI Runtime service providers for downstream model processing.
Outseek
AgentMQ
internal Grid Heap platform; same legal entity- Purpose
- Internal authorized workflow and tool execution.
- Data
- Authorized task inputs/outputs, approvals and execution records.
- Conditions
- Internal processing within Grid Heap. The external hosting or delivery company is disclosed separately.
Tokens.Pay
Cloudflare
service provider- Purpose
- Website/API delivery, security and the application storage or queues used by the selected feature.
- Data
- Technical requests, IP addresses and applicable application content.
- Conditions
- Applies only to the named product and the feature described here.
Tokens.Pay
Adobe Fonts
font delivery provider- Purpose
- Delivery and licensing of hosted interface fonts.
- Data
- IP address and browser request information; no application file contents.
- Conditions
- Applies only to the named product and the feature described here.
Tokens.Pay
Clerk
service provider- Purpose
- Authentication, session management and applicable organization membership.
- Data
- Account, sign-in, profile and session identifiers.
- Conditions
- Applies only to the named product and the feature described here.
Tokens.Pay
Stripe
payment provider; independent controller for its own obligations- Purpose
- Checkout, payments and related billing administration.
- Data
- Billing/contact information, payment credentials and transaction records.
- Conditions
- Applies only to the named product and the feature described here.
Tokens.Pay
PayPal
payment provider; independent controller for its own obligations- Purpose
- Payments and related transaction administration.
- Data
- Payment/account information and transaction records.
- Conditions
- Applies only to the named product and the feature described here.
Tokens.Pay
Sentry
service provider- Purpose
- Application error and performance monitoring.
- Data
- Technical/error and performance metadata, including identifiers permitted by the product’s diagnostic settings.
- Conditions
- Applies only to the named product and the feature described here.
Tokens.Pay
OpenAI
service provider- Purpose
- Selected text, image, embedding or audio model processing through AI Runtime.
- Data
- Inputs and context submitted to the selected model feature and its output.
- Conditions
- Applies only to the named product and the feature described here.
Tokens.Pay
DeepSeek
service provider- Purpose
- Selected DeepSeek models through the direct provider API.
- Data
- Model request inputs, context and output.
- Conditions
- Only a direct DeepSeek API route. A DeepSeek model served by Fireworks sends model data to Fireworks instead; route and fallback selection determine the recipient.
Tokens.Pay
Fireworks AI
service provider- Purpose
- Hosting selected model requests through AI Runtime.
- Data
- Model request inputs, context and output.
- Conditions
- Only a selected Fireworks-hosted model route, including the documented DeepSeek peak/fallback paths. Model branding alone does not identify the host.
Tokens.Pay
Moonshot AI
service provider- Purpose
- Selected Kimi model requests through AI Runtime.
- Data
- Model request inputs, context and output.
- Conditions
- Only a purchased/selected Kimi route; account and billing records are not sent as model context.
Tokens.Pay
AI Runtime (airuntime.dev)
internal Grid Heap platform; same legal entity- Purpose
- Internal model routing, selected compute and usage accounting.
- Data
- Applicable model inputs/outputs, authorized configuration and usage records.
- Conditions
- Internal processing within Grid Heap. The external hosting or delivery company is disclosed separately. See AI Runtime privacy information and AI Runtime service providers for downstream model processing.
Tokens.Pay
RShift Sites
internal Grid Heap platform; same legal entity- Purpose
- Internal product website/API hosting and applicable project storage.
- Data
- Applicable website/API requests, project records and support submissions.
- Conditions
- Internal processing within Grid Heap. The external hosting or delivery company is disclosed separately.
Embeddings
Cloudflare
service provider- Purpose
- Sites/API edge delivery, private R2, Vectorize, Hyperdrive and the three active Cloudflare BGE embedding models.
- Data
- Technical requests, applicable cached vectors/inputs and model input when a Cloudflare BGE model is selected.
- Conditions
- Applies only to the named product and the feature described here.
Embeddings
Adobe Fonts
font delivery provider- Purpose
- Delivery and licensing of hosted interface fonts.
- Data
- IP address and browser request information; no application file contents.
- Conditions
- Applies only to the named product and the feature described here.
Embeddings
Clerk
service provider- Purpose
- Authentication, session management and applicable organization membership.
- Data
- Account, sign-in, profile and session identifiers.
- Conditions
- Applies only to the named product and the feature described here.
Embeddings
OpenAI
service provider- Purpose
- The active OpenAI Embedding 3 Small and Large models.
- Data
- Text submitted to the selected OpenAI embedding model and the returned vectors.
- Conditions
- Only when an OpenAI model is selected. Cloudflare BGE requests use Cloudflare; paused or uncredentialed model vendors are excluded.
Embeddings
Amazon Web Services
service provider- Purpose
- Applicable product records in RShift Sites managed PostgreSQL.
- Data
- Applicable account/application records and operational metadata.
- Conditions
- Product database processing through the hosted service; customer-selected external databases have their own scope.
Embeddings
AI Runtime (airuntime.dev)
internal Grid Heap platform; same legal entity- Purpose
- Internal model routing, selected compute and usage accounting.
- Data
- Applicable model inputs/outputs, authorized configuration and usage records.
- Conditions
- Internal processing within Grid Heap. The external hosting or delivery company is disclosed separately. See AI Runtime privacy information and AI Runtime service providers for downstream model processing.
Embeddings
RShift Sites
internal Grid Heap platform; same legal entity- Purpose
- Internal product website/API hosting and applicable project storage.
- Data
- Applicable website/API requests, project records and support submissions.
- Conditions
- Internal processing within Grid Heap. The external hosting or delivery company is disclosed separately.
Markov Now
Cloudflare
service provider- Purpose
- Website/API delivery, security and the application storage or queues used by the selected feature.
- Data
- Technical requests, IP addresses and applicable application content.
- Conditions
- Applies only to the named product and the feature described here.
Markov Now
Adobe Fonts
font delivery provider- Purpose
- Delivery and licensing of hosted interface fonts.
- Data
- IP address and browser request information; no application file contents.
- Conditions
- Applies only to the named product and the feature described here.
Markov Now
Amazon Web Services
service provider- Purpose
- Applicable product records in RShift Sites managed PostgreSQL.
- Data
- Market snapshots, alert/contact subscriptions and operational records.
- Conditions
- Product database processing through the hosted service; customer-selected external databases have their own scope.
Markov Now
TidyMessages
internal Grid Heap platform; same legal entity- Purpose
- Internal email or enabled messaging delivery.
- Data
- Applicable messages, addresses/channel identifiers and delivery records.
- Conditions
- Internal processing within Grid Heap. The external hosting or delivery company is disclosed separately.
Markov Now
RShift Sites
internal Grid Heap platform; same legal entity- Purpose
- Internal product website/API hosting and applicable project storage.
- Data
- Applicable website/API requests, project records and support submissions.
- Conditions
- Internal processing within Grid Heap. The external hosting or delivery company is disclosed separately.
Serialize
Cloudflare
service provider- Purpose
- Website delivery, security and the public stateless, read-only MCP catalogue.
- Data
- Technical requests and platform logs; tool inputs, local parsing and SQL are processed in the browser unless an explicit network operation is run.
- Conditions
- Applies only to the named product and the feature described here.
Serialize
jsDelivr
content delivery provider- Purpose
- Delivery of the pinned DuckDB browser/Wasm runtime.
- Data
- IP address and library-download request metadata; inspected local file contents are not sent to the CDN.
- Conditions
- Applies to the separately accessible legacy Inspector when its DuckDB runtime is requested.
Cowork Town
Cloudflare
service provider- Purpose
- Website/API delivery, security and the application storage or queues used by the selected feature.
- Data
- Technical requests, IP addresses and applicable application content.
- Conditions
- Applies only to the named product and the feature described here.
Cowork Town
Adobe Fonts
font delivery provider- Purpose
- Delivery and licensing of hosted interface fonts.
- Data
- IP address and browser request information; no application file contents.
- Conditions
- Applies only to the named product and the feature described here.
Cowork Town
Clerk
service provider- Purpose
- Authentication, session management and applicable organization membership.
- Data
- Account, sign-in, profile and session identifiers.
- Conditions
- Applies only to the named product and the feature described here.
Cowork Town
Amazon Web Services
service provider- Purpose
- Applicable product records in RShift Sites managed PostgreSQL.
- Data
- Applicable account/application records and operational metadata.
- Conditions
- Product database processing through the hosted service; customer-selected external databases have their own scope.
Cowork Town
AI Runtime (airuntime.dev)
internal Grid Heap platform; same legal entity- Purpose
- Internal model routing, selected compute and usage accounting.
- Data
- Applicable model inputs/outputs, authorized configuration and usage records.
- Conditions
- Internal Grid Heap model service for the requested AI features. Downstream model processing is described centrally for AI Runtime. See AI Runtime privacy information and AI Runtime service providers for downstream model processing.
Cowork Town
RShift Sites
internal Grid Heap platform; same legal entity- Purpose
- Internal product website/API hosting and applicable project storage.
- Data
- Applicable website/API requests, project records and support submissions.
- Conditions
- Internal processing within Grid Heap. The external hosting or delivery company is disclosed separately.
Serialize
Adobe Fonts
font delivery provider- Purpose
- Delivery of the licensed Proxima Nova interface font.
- Data
- IP address, browser and font-request metadata; the application does not send tool input to Adobe Fonts.
- Conditions
- When a public page loads the configured Adobe Fonts stylesheet and font resources.
Serialize
Google AdSense
advertising provider- Purpose
- Advertising on selected public tool pages and applicable consent messaging.
- Data
- Device, connection and advertising information, including cookies or similar identifiers subject to applicable visitor choices.
- Conditions
- Only where advertising is enabled and the applicable regional requirements and visitor choices permit; prelaunch serving is disabled by default.
Dueglow
OpenFreeMap and its map-delivery providers
independent service; own terms and privacy notice- Purpose
- Optional public map styles and map tiles.
- Data
- IP address, technical connection information and requested map area; no device GPS reading.
- Conditions
- Only when a map is displayed or navigated in Dueglow.
Dueglow
Unsplash
independent service; own terms and privacy notice- Purpose
- Optional online cover search, image delivery and provider-required download attribution.
- Data
- Cover search text through the Dueglow API; image requests, technical connection information and applicable download event.
- Conditions
- Only when its cover search results or images are requested.
Dueglow
Pexels
independent service; own terms and privacy notice- Purpose
- Optional online cover search and image delivery.
- Data
- Cover search text through the Dueglow API; image requests and technical connection information.
- Conditions
- Only when its cover search results or images are requested.
Dueglow
Google Play
independent service; own terms and privacy notice- Purpose
- Android app distribution and upfront paid-app purchase.
- Data
- Account, purchase and distribution records handled by Google; developer-visible order/distribution records. The app does not collect card data.
- Conditions
- When you obtain the app through Google Play; governed by Google's own notices.
Processing locations depend on the service, enabled feature and selected deployment. Listed locations apply to the identified deployment, rather than every service offered by that provider. Our Privacy Policy explains international transfers and applicable safeguards.
Grid Heap, Inc. · 1111B S Governors Ave Ste 51059, Dover, DE 19904, United States. Questions: legal@gridheap.com.