Sub-processors
Last updated: August 15, 2026
A sub-processor is a third party that processes customer data on our behalf so that Vyneron can work. This page lists every one of them, what each is used for, and what data reaches it. We keep the list to what the product actually needs, and we update this page whenever a vendor is added or removed. How we handle your data in general is covered in the privacy policy.
Infrastructure
| Sub-processor | Used for | Data involved | Processing location |
|---|---|---|---|
| Hetzner Online GmbH | Hosts the application server and the database | All customer content: tasks, notes, routines, chat history, account details | Nuremberg, Germany (EU) |
| Cloudflare, Inc. — R2 object storage | Stores uploaded files and encrypted database backups | Files customers upload, and nightly database backups kept for 30 days | Cloudflare object storage |
| Cloudflare, Inc. — CDN, WAF, Turnstile | TLS termination, traffic filtering, and bot protection on sign-up | IP address and request metadata; no message content | Global edge network |
| Vercel Inc. | Hosts the marketing site (vyneron.com) and its basic analytics | Marketing site visits only. No task, note or message content | Global edge network |
| Microsoft Corporation — Clarity | Session analytics and heatmaps on the marketing site only | Anonymized marketing site interaction. Typed text and form inputs are masked | Microsoft infrastructure |
AI providers
Vyneron does not train, host or fine-tune any model. A request is sent to the provider, the answer comes back, and that is the extent of it. We do not send customer data for model training and we do not turn on any provider option that would allow it.
| Sub-processor | Used for | Data involved | Processing location |
|---|---|---|---|
| Google LLC — Gemini API | Primary model for understanding requests, and for reading text from images | The message the customer sent, plus the workspace context needed to answer it | Determined by the provider |
| Groq, Inc. | Text fallback, and the primary speech-to-text for voice messages | The message the customer sent, or the voice note they recorded | Determined by the provider |
| OpenAI, L.L.C. | Fallback for reading text from images, and a speech-to-text fallback | The image or audio the customer sent | Determined by the provider |
AI providers used only with your own key
Customers on paid plans can supply their own provider key. When they do, the request goes to that customer's own account with the provider, under their own agreement. Vyneron stores the key encrypted and nothing else changes.
| Sub-processor | Used for | Data involved | Processing location |
|---|---|---|---|
| Anthropic PBC | Claude models, only when a customer supplies their own key | The message the customer sent | Determined by the provider |
| OpenRouter, Inc. / Together Computer, Inc. | OpenAI-compatible models, only when a customer supplies their own key | The message the customer sent | Determined by the provider |
Operations
| Sub-processor | Used for | Data involved | Processing location |
|---|---|---|---|
| Resend (Plus Five Five, Inc.) | Sends transactional email: reminders, digests, account notices | Email address and the content of that email | Determined by the provider |
| Paddle.com Market Ltd | Merchant of record for subscriptions and payments | Billing details. Vyneron never receives or stores card numbers | Determined by the provider |
| Functional Software, Inc. — Sentry | Error monitoring so faults can be diagnosed | Error context and stack traces. Personal data capture is switched off | Determined by the provider |
Messaging channels you choose to connect
These only apply if you connect the channel yourself. If you never connect Telegram or Slack, no data reaches them.
| Sub-processor | Used for | Data involved | Processing location |
|---|---|---|---|
| Telegram FZ-LLC | Delivers messages and reminders, only if the customer connects Telegram | The messages exchanged with the bot in that chat | Determined by the provider |
| Slack Technologies, LLC | Delivers messages and reminders, only if the customer connects Slack | The messages exchanged with the bot, and mentions in channels it was invited to | Determined by the provider |
Questions or objections
If you want to be told before we add a sub-processor, or you object to one, write to support@vyneron.com. For security matters specifically, see security.txt.
© 2026 Vyneron Software. All rights reserved.