Subprocessors

Last updated: February 6, 2026

Subprocessors are third parties that process personal data on our behalf to help us deliver Avaplicity. We only engage subprocessors under written terms that include confidentiality and data protection obligations.

For questions, email privacy@avaplicity.com.

Infrastructure

Vendor	Purpose	Data processed	Location	Links
Vercel	Website hosting and CDN	Website request metadata (including IP address), logs, and basic analytics cookies (if enabled).	See vendor policy	Privacy Subprocessors
Amazon Web Services (AWS)	Application infrastructure (Kubernetes/EKS), object storage (S3), secrets management (Secrets Manager), encryption (KMS)	Hosted application data (encrypted at rest) and operational logs/metrics needed to run the service.	See vendor policy	Privacy

Analytics and Monitoring

Vendor	Purpose	Data processed	Location	Links
PostHog	Website analytics	Pageview and event metadata (device/browser details; IP address per provider defaults).	See vendor policy	Privacy
Datadog	Logs, metrics, APM, and monitoring	Operational telemetry and logs (may include IP address and pseudonymous identifiers).	See vendor policy	Privacy

Feature Flags

Vendor	Purpose	Data processed	Location	Links
LaunchDarkly	Feature flag management and kill switches	Feature flag evaluation data and pseudonymous identifiers.	See vendor policy	Privacy

Authentication and Identity

Vendor	Purpose	Data processed	Location	Links
Firebase Authentication	User authentication	Email address (if used), authentication tokens, and sign-in metadata.	See vendor policy	Privacy

Payments

Vendor	Purpose	Data processed	Location	Links
RevenueCat	Subscriptions and entitlements	Purchase receipts, subscription status, and pseudonymous app/user identifiers.	See vendor policy	Privacy

AI and Voice

Vendor	Purpose	Data processed	Location	Links
OpenAI	LLM provider (inference)	Prompts and context you provide as part of using the service.	See vendor policy	Privacy
Cartesia	Voice and TTS provider	Text for synthesis and generated audio. Voice inputs depend on configuration and user choice.	See vendor policy	Privacy

Data Stores

Vendor	Purpose	Data processed	Location	Links
MongoDB Atlas	Primary database	Account data and user content stored in the service (as configured).	See vendor policy	Privacy
Redis (managed)	Cache and locks	Ephemeral cache keys and metadata used to operate the service.	See vendor policy	Redis

Change log

February 6, 2026: Refreshed the list and removed placeholder entries.