Subprocessors
Last updated September 11, 2026
These are the third-party services that process data on ajuna's behalf. It is the same list as Section 6.1 of the privacy policy, kept current here — we update this page before adding a new vendor.
Each provider is bound by contract to use your data only to provide services to us, and none of them may use it for their own purposes. All of these providers are located in the United States or store data in US regions.
| Provider | What it does | What it can access | Privacy policy |
|---|---|---|---|
| Supabase | Database, authentication, file storage | Account data and your stored content | policy → |
| Render | Application hosting and backend compute | Data in transit through the application | policy → |
| Vercel | Web application hosting and delivery | Request metadata, IP address, log data | policy → |
| Anthropic | AI model inference | Only the content sent for a specific AI request | policy → |
| OpenAI | AI model inference | Only the content sent for a specific AI request | policy → |
| Stripe | Payment processing | Payment and billing information | policy → |
| PostHog | Product analytics | Usage and device data, pseudonymous user ID | policy → |
| Google (Analytics 4 + Tag Manager) | Website traffic analytics and tag management | Usage and device data, IP address (truncated) | policy → |
| Resend | Transactional and marketing email, including the public-beta waitlist | Name, email address, message content | policy → |
How they're configured
- AI providers (Anthropic, OpenAI) receive only the content needed for a specific request you make, under commercial API terms that prohibit using it to train their models. They may retain inputs and outputs for a limited period — typically up to 30 days — for abuse monitoring and legal compliance, after which they are deleted. See Section 5 of the privacy policy.
- PostHog runs without session recording — we never capture video of your screen or keystrokes.
- Google Analytics runs only on this marketing website, never inside the Service or the app, with Google Signals and all advertising features turned off and IP addresses truncated.
Questions? Email privacy@ajuna.app.