Sub-processors
Every third party that can touch data on your behalf, what they do, and where they are. If this list changes, this page changes.
Last updated 4 September 2026
We keep this deliberately short, because the architecture keeps it short. Your email is stored on your own machine, so most of what a normal SaaS would list here simply doesn’t apply. We cannot pass on what we never hold.
Who processes what
| Sub-processor | What it does | What it sees | Where |
|---|---|---|---|
| Anthropic | AI model provider for agent research and outreach writing | The specific text sent for a task. Not retained by us. | United States |
| Google (Gemini) | AI model provider for drafting, summaries and catch-up | The specific text sent for a task. Not retained by us. | United States |
| Supabase | Database for accounts, agents, buyer records and usage metering | Account details, buyer company records, usage counts | EU region |
| Vercel | Hosting for the website and the relay, and cookieless page-count analytics on the website | Request metadata in transit | Global edge |
| Stripe | Payments and subscription billing | Name, email, billing identifiers. Card numbers never touch us at all | United States, EU entities for EU customers |
| Resend | Sends the emails we write to you: sign-in links, batch notices, the weekly digest | Your email address and the content of those emails | United States |
| Brevo | Sends the same emails when Resend cannot, and is the fallback for all of them | Your email address and the content of those emails | EU |
| Google (website only) | Analytics and ads conversion measurement on oleadesk.com, only if you say yes on the cookie banner. Nothing of the kind exists inside the app | Page views; a subscription counted with no name attached | United States |
What is never sent anywhere
- Your mailbox contents. They live in a database on your computer.
- Your mailbox password. It lives in the Windows Credential Manager on your machine.
- The content of AI requests or responses. We meter tokens and cost, not text.
Changes
If we add a sub-processor we update this page. Customers on a signed data processing agreement are notified before the change takes effect, so there is time to object.
OleaDesk is a product of Clearpath Goods, LLC, 10421 Kardwright Ct, Montgomery Village, MD 20886, United States, which is also the data controller of record.
Contact
hello@oleadesk.com. A person reads it, and abuse reports are answered before anything else.