Data processing

Last updated 22 August 2026. This is an operational summary, not a signed DPA.

Sub-processors: Supabase (database, auth, storage), OpenAI (embeddings and completions), Stripe (billing), Resend (email, if configured), Vercel (hosting, if used).

Organisation owners can export inbox CSV on Growth and Scale. For deletion or a DSAR, contact the account owner; we will process org-scoped deletes through the database cascade on organisation removal.

SMS accepts STOP, STOPALL, UNSUBSCRIBE, CANCEL, END, or QUIT as the whole message. START is not supported; opting back in is not available.