Legal
Subprocessors and third parties.
Who processes your data on our behalf, and what the parties a tool call reaches receive.
01
Why this page exists
When your agent calls a tool, the input for that call goes to the company that operates it. That is what running the call means. This page lists who processes data on our behalf and what each of them receives.
Two kinds of third party are listed separately: the infrastructure that runs the product for every customer, and the parties a specific tool call reaches.
02
The infrastructure providers
Each of these receives only what its job requires. None of them is a party you chose; they run the product for every customer in the same way.
Stripe
- Role
- Payment processing
- What it receives
- Card details (held by Stripe, never by us), billing name and country, and your payment history.
Hetzner
- Role
- Server hosting (the API, the worker, the database)
- What it receives
- Everything the service stores while it runs: your account, run history, ledger, and API keys live on infrastructure this provider hosts for us.
Vercel
- Role
- Marketing-site hosting
- What it receives
- Standard request data such as IP address and browser type, for the public pages of this site. This part of the site holds no database and no account data of its own.
Brevo
- Role
- Transactional email
- What it receives
- The email address a sign-in link, a billing notice, or a reply from us is sent to, and the message itself.
AI model provider
- Role
- Writes the chat assistant's replies
- What it receives
- Your chat messages and the parts of your Vault the assistant needs to answer you. The AI service says it does not train on them, and we set our requests to go only to model hosts whose published policy is not to keep or train on them. We cannot audit those hosts ourselves, and we do not claim they keep nothing.
Object storage provider
- Role
- Holds the files in your Vault
- What it receives
- The files you and the assistant save in your Vault. The provider encrypts them at rest.
| Provider | Role | What it receives |
|---|---|---|
| Stripe | Payment processing | Card details (held by Stripe, never by us), billing name and country, and your payment history. |
| Hetzner | Server hosting (the API, the worker, the database) | Everything the service stores while it runs: your account, run history, ledger, and API keys live on infrastructure this provider hosts for us. |
| Vercel | Marketing-site hosting | Standard request data such as IP address and browser type, for the public pages of this site. This part of the site holds no database and no account data of its own. |
| Brevo | Transactional email | The email address a sign-in link, a billing notice, or a reply from us is sent to, and the message itself. |
| AI model provider | Writes the chat assistant's replies | Your chat messages and the parts of your Vault the assistant needs to answer you. The AI service says it does not train on them, and we set our requests to go only to model hosts whose published policy is not to keep or train on them. We cannot audit those hosts ourselves, and we do not claim they keep nothing. |
| Object storage provider | Holds the files in your Vault | The files you and the assistant save in your Vault. The provider encrypts them at rest. |
Hetzner Online GmbH is a German company, and the production server that stores your account, run history, ledger and API keys runs in its Nuremberg, Germany datacenter. We keep backup copies of that data on our own servers in the US, and they are deleted automatically within about 10 weeks. Brevo is a French company. Stripe and Vercel are US companies, and card processing and this site's public pages run on their US infrastructure.
A provider may also use its own sub-regions, such as a payment region or a CDN edge. If you need that confirmed for a specific provider, ask using the contact below.
Some providers on this page are listed by role rather than by name. We will tell you the name of any provider on this page if you ask, using the contact below.
03
The tool provider your agent calls
The parties below receive the input for the specific call your agent made: the parameters your agent sent, and nothing about your account beyond what routing and billing that call requires. Their own privacy practices govern what happens to that input on their side. Every tool's page names its data source; that source's own terms and privacy policy govern its handling.
Tool intermediary
- Role
- Routes most catalog calls to the data source that answers them
- What it receives
- The input for that one call, and the result the data source sends back. Nothing about your account, your balance, or your other runs.
Language-model provider
- Role
- Runs the tools that use a language model
- What it receives
- The prompt and any text your agent sends with a call to one of those tools, and the text the model returns.
The data source
- Role
- The third party that answers the call (named on each tool's page)
- What it receives
- The input for that one call, passed on by us or by the intermediary.
| Provider | Role | What it receives |
|---|---|---|
| Tool intermediary | Routes most catalog calls to the data source that answers them | The input for that one call, and the result the data source sends back. Nothing about your account, your balance, or your other runs. |
| Language-model provider | Runs the tools that use a language model | The prompt and any text your agent sends with a call to one of those tools, and the text the model returns. |
| The data source | The third party that answers the call (named on each tool's page) | The input for that one call, passed on by us or by the intermediary. |
Before a tool is opened to customers we test it with a small number of paid calls of our own. The data sources and rights notice covers what that testing, and any customer call, can return about other people.
The tool intermediary is a US company. A data source may be based anywhere; its country depends on the tool, and its own terms and privacy policy govern its handling.
- We do not send a provider anything about you beyond what routing and billing that call requires.
- A provider only sees the input for calls made to it: never your balance, your other runs, or any other provider's traffic.
- Fields that look like a credential or a secret are redacted from the run record before it is stored, and are never forwarded to a provider unless they are the parameter that call requires.
04
Keeping this list current
We give you at least 30 days' notice before we add or replace a provider listed above, by email to the address on your account, and we update this page and its effective date when it takes effect. The model hosts the AI service chooses between are not on this list, so we cannot promise notice of changes among them.
Questions about a specific provider or a specific call go to pixellabsweb3@gmail.com. See also the privacy policy, the terms of service, and the data sources and rights notice.