Legal
Subprocessors
Last updated January 1, 1970
Konshus uses the following third-party providers to operate the Vault. We never sell your data, and we never use it to train external AI models. Each provider only receives the data needed to perform its specific function.
We will update this page before adding a new subprocessor that materially changes how your data is handled.
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Supabase | Database, authentication, file storage | All member data: account, vault artifacts, atoms, chats, exports | United States (AWS us-east-1) |
| Cloudflare Workers (via Lovable) | Application hosting and edge compute | Request metadata, IP addresses (transit) | Global edge network |
| Stripe | Payment processing and subscription billing | Email, name, billing address, payment method (Stripe holds card data; we never see it) | United States / European Union |
| Google (Gemini API, via Lovable AI gateway) | Atom extraction from artifacts; chat for Ember, Spark, and Founding tiers | Artifact text, chat messages | United States |
| OpenAI (GPT-5 family, via Lovable AI gateway) | Persona synthesis for Counsel and Counsel Pro; silent reasoning head-start across tiers | Atom text, chat messages | United States |
| ElevenLabs | Speech-to-text for voice capture (Spark and above, when you use it) | Audio recordings (transcribed then discarded), transcripts | United States |
| Resend | Transactional and weekly Sunday Mirror emails | Email address, message body | United States |
| Sentry | Error monitoring and crash reporting | Stack traces, user ID (PII-stripped), browser metadata | United States |
Questions? Email hello@konshus.ai. A real human reads every message.