1.Current subprocessors
| Name | Purpose | Data | Location |
|---|---|---|---|
| Supabase | Database and authentication | Account, device and billing records; usage and request metadata; diagnostics; shared content and project memory when content sharing is on; installer and update files | United States (US East, Ohio) |
| Railway | API and model gateway hosting | Requests passing through the API and gateway, including task context sent to AI models | United States |
| Vercel | Website and console hosting | Website and console requests, sign-in cookies, contact form submissions | United States, with a global edge network |
| OpenAI | AI model inference (default models) | Task context: prompts, drawing data, images, PDF text and pages, tool results | United States |
| Anthropic | AI model inference, when a Claude model is selected | Task context: prompts, drawing data, images, PDF text and pages, tool results | United States |
| Stripe | Payments, tax and invoices | Billing contact, payment card details, billing address, transactions | United States |
| Cal.com | Demo scheduling | Name, firm, email, team size and booking notes from demo requests | Cal.com's hosted service (see its privacy policy) |
| Resend | Account and billing emails, such as setup links and low-balance notices | Name, email address and the text of the notice. No drawing content or prompts. | United States |
| GitHub | Source code and release hosting | Pickbox source code and release builds; no customer content | United States |
2.How the AI model providers are used
OpenAI provides the default models. Anthropic receives requests only when a Claude model is selected in the app. Requests reach them through our cloud API, which records request metadata for billing but does not store prompts or responses. We send OpenAI requests with storage turned off.
Pickbox sends the parts of a drawing and the project files it reads to do a task, not the drawing files themselves. The Privacy Policy describes exactly what is sent.
3.What we do not use
We do not use analytics, advertising or error-tracking services, on the website or in the app.
4.Changes to this list
We will give at least 30 days’ notice before we add or replace a subprocessor, by updating this page and emailing each customer’s account contact. Customers can object as described in the Data Processing Addendum. Questions: wadehunter@opulentity.com.
Related documents
Questions about this document: wadehunter@opulentity.com, or Opulentity LLC, 7552 East Wethersfield Road, Scottsdale, Arizona 85260.