Sub-processors
Every third party that can touch data on your behalf, what they do, and where they are. If this list changes, this page changes.
Last updated 25 July 2026
We keep this deliberately short, because the architecture keeps it short. Your email is stored on your own machine, so most of what a normal SaaS would list here simply doesn't apply. We cannot pass on what we never hold.
Who processes what
| Sub-processor | What it does | What it sees | Where |
|---|---|---|---|
| Anthropic | AI model provider for agent research and outreach writing | The specific text sent for a task. Not retained by us. | United States |
| Google (Gemini) | AI model provider for drafting, summaries and catch-up | The specific text sent for a task. Not retained by us. | United States |
| Supabase | Database for accounts, agents, buyer records and usage metering | Account details, buyer company records, usage counts | EU region |
| Vercel | Hosting for the website and the relay | Request metadata in transit | Global edge |
What is never sent anywhere
- Your mailbox contents. They live in a database on your computer.
- Your mailbox password. It lives in your operating system's credential manager.
- The content of AI requests or responses. We meter tokens and cost, not text.
Changes
If we add a sub-processor we update this page. Customers on a signed data processing agreement are notified before the change takes effect, so there is time to object.
Company details, including our registered entity and the data controller of record, are [TO CONFIRM] while the company is being formed.
Contact
hello@oleadesk.com. A person reads it, and abuse reports are answered before anything else.