Legal
Subprocessors
The third parties that process personal data on our behalf, what each one does, and which of them can ever see the content of your work.
How to read this list
A subprocessor is a company we rely on to run the service. Most of the entries below handle account and billing data only. One category — hosted model providers — can see the content of a conversation, and only when you choose a hosted model for that turn. That distinction is the important one, so it is called out on every row.
Infrastructure and account data
| Subprocessor | What it does for us | Sees your conversations? |
|---|---|---|
| Supabase | Database and sign-in. Holds your account record, plan, credit balance, usage metering, and device registrations. | No |
| Vercel | Hosts this website and the cloud API. Processes request metadata such as IP address in the course of serving pages. | No |
| Stripe | Payments and subscriptions. Card details go to Stripe directly and are never held by us. | No |
| Resend | Sends transactional email — sign-in links, security alerts, billing notices. Receives your email address and the contents of those messages. | No |
| Sentry | Error monitoring. Receives crash and error reports so faults get fixed. | No |
| GitHub | Distributes the macOS app and its update manifest. Sees download requests. | No |
Hosted model providers
These process the content of a turn, and only the turn you send them. They are engaged when you use managed credits, or when you supply your own key for that provider.
| Subprocessor | What it does for us | Sees your conversations? |
|---|---|---|
| OpenAI, Anthropic, Google, Mistral, Groq | Answer prompts sent to their models. They receive the text of the turn you send, and any files or images you attach to it. | Yes — the turns you send to them |
| fal | Image, audio, video and 3D generation. Receives the prompt for the item you asked to generate. | Yes — generation prompts |
| Brave Search | Web search, when the assistant searches on your behalf. Receives the search query, not the conversation around it. | Search queries only |
How to use none of them
Run a local model. Nothing in the second table is engaged for a conversation answered on your own Mac — there is no prompt to send. This is not a setting we approximate; it is the absence of a network call. The security and privacy page explains what does and does not leave your machine.
Where processing happens
Our infrastructure providers operate in the EU and the United States. Where personal data is transferred outside the EEA, it is covered by the European Commission’s Standard Contractual Clauses or an equivalent transfer mechanism in the relevant provider’s data processing agreement.
Changes to this list
We will update this page when a subprocessor is added or removed. If you want to be told in advance, write to privacy@slynkz.com and we will notify you of changes.
Last updated: 12 July 2026
This document is a draft prepared for launch and is under legal review.