Subprocessors
Last updated October 29, 2026
These are the third-party services that process data on ajuna's behalf. It is the same list as Section 6.1 of the privacy policy, kept current here — we update this page before adding a new vendor.
Each provider is bound by contract to use your data only to provide services to us, and none of them may use it for their own purposes. All of these providers are located in the United States or store data in US regions.
| Provider | What it does | What it can access | Privacy policy |
|---|---|---|---|
| Supabase | Database, authentication, file storage | Account data and your stored content | policy → |
| Render | Application hosting and backend compute | Data in transit through the application | policy → |
| Vercel | Web application hosting and delivery | Request metadata, IP address, log data | policy → |
| Anthropic | AI model inference | Only the content sent for a specific AI request | policy → |
| OpenAI | AI model inference | Only the content sent for a specific AI request | policy → |
| Google (Gemini) | AI model inference — reading the text out of images you capture (OCR) | Only the image sent for that OCR request | policy → |
| Perplexity | AI research for the atlas feature | Only the research question and notes you submit | policy → |
| Google (Places) | Vendor and place lookup in hive, including place links you capture | Only the place name, link or search text sent for that one lookup | policy → |
| Catalog lookups (TMDB, BoardGameGeek, Apple iTunes, OpenLibrary, Google Books) | Book, game, movie and music catalog search in kept | Only the search query you type | — |
| Stripe | Payment processing | Payment and billing information | policy → |
| PostHog | Product analytics | Usage and device data, pseudonymous user ID — counts, types and flags about your activity, never the content of your entries | policy → |
| Google (Analytics 4 + Tag Manager) | Website traffic analytics and tag management | Usage and device data, IP address (truncated) | policy → |
| Resend | Email for this website — the public-beta waitlist and marketing updates | Name, email address, message content | policy → |
| Postmark | Account and sign-in email (confirmations, password resets), weekly review digests, and report emails you request | Email address and the contents of those messages | policy → |
How they're configured
- AI providers (Anthropic, OpenAI, Google Gemini, Perplexity) receive only the content needed for a specific request you make, under commercial API terms that prohibit using it to train their models. They may retain inputs and outputs for a limited period — typically up to 30 days — for abuse monitoring and legal compliance, after which they are deleted. See Section 5 of the privacy policy.
- PostHog runs without session recording — we never capture video of your screen or keystrokes.
- Google Analytics runs only on this marketing website, never inside the Service or the app, with Google Signals and all advertising features turned off and IP addresses truncated.
Questions? Email privacy@ajuna.app.