Subprocessors

• Vercel Inc. (USA): hosting of the website and app, the AI gateway that routes chat requests, and cookieless visit statistics. Data: everything the app handles while it runs. Transfers: Data Privacy Framework / standard contractual clauses.
• Supabase Inc. (database in the EU, Ireland): our database and backups. Data: your account, assistant, chat, memories, tasks and connection tokens (encrypted).
• Anthropic PBC (USA), reached through Vercel's AI gateway: the AI model (Claude) that answers you in the chat. Data: your message, recent chat, memories and the data a tool read for that answer. Not used to train models.
• Resend Inc. (USA): sends account emails (welcome, password reset, trial ending, receipts) and receives the emails you forward to your IEXA address. Data: your email address and the email's content; for forwarded email, the sender, subject and text, of which IEXA keeps only the sender, subject and first lines.
• Zoho Corporation (EU data centre): our hello@iexa.si mailbox. Data: emails you send us.

• ElevenLabs Inc. (USA): text-to-speech for IEXA's voice. Data: the text to be read aloud, and your voice sample if you choose your own voice.
• Stripe Payments Europe Ltd. (Ireland): payments, once paid plans open. Data: your name, email, billing details and card (we never see your full card number).
• Google LLC (USA): sign-in with Google, and Google Calendar if you connect it. Data: your Google profile and the calendar events IEXA reads.
• Shopify Inc. (Canada): only if you connect your store. Data: order totals and counts from your store.
• Meta Platforms Ireland Ltd.: only if you accept advertising cookies. Data: which page you visited from our ad.

Last change: 28 October 2026. Business customers can ask at hello@iexa.si to be told by email before this list changes.