Everything below is an accurate description of what OnBetterTerms does with what you write, and it is published now so you can read it before deciding to use the product. It has not been reviewed by a lawyer and is not written for a particular jurisdiction, so it is not offered to you as a contract yet. Where a clause needs a legal answer we do not have, it says so in place rather than being filled in with a plausible-looking one — the full list is here.
Subprocessors
Companies that can process data on our behalf, what each one actually receives, and whether it is in use right now.
Two of these are switchable, so the honest answer is not the same on every deployment: transcription is currently switched off, and email is sent via console. The status on each entry below is read from that configuration rather than written by hand.
- AnthropicIn use — every default model route is Anthropic
AI inference — the guidance, mediation, summarisation and safety classification.
- Data involved
- The text assembled for that specific request, and nothing else. Personal requests may include your own private and never-shared writing; requests whose output another person will see are built by a separate path that can only read shared content.
- Required
- Required
- Processing region
- United States
- OpenAINot in use on this deployment
Alternative AI inference, where a deployment routes a workflow to a GPT model, and speech-to-text when the Whisper driver is selected.
- Data involved
- The same per-request text as above for inference; the audio of a voice note for transcription.
- Required
- Optional
- Processing region
- United States
- DeepgramNot in use on this deployment
Speech-to-text, when the Deepgram driver is selected.
- Data involved
- The audio of a voice note, and the transcript it returns.
- Required
- Optional
- Processing region
- United States
- ResendNot in use on this deployment
Transactional email — sign-in links, invitations, security notices.
- Data involved
- Your email address and the body of that message. Relationship content is never put in an email.
- Required
- Only if enabled
- Processing region
- United States and European Union
- StripeNot in use on this deployment
Payments, for anyone who chooses a paid plan.
- Data involved
- Your email address, an account identifier, and the plan you chose. Card details go to Stripe directly and never reach our servers.
- Required
- Only if enabled
- Processing region
- United States, with regional processing
- Expo (push notification service)Not in use on this deployment
Delivering push notifications to the phone app, via Apple and Google.
- Data involved
- A device push token and the notification text. Notifications carry no relationship content unless you have switched that on.
- Required
- Only if enabled
- Processing region
- United States
Hosting and storage
The application and its database run on infrastructure operated directly by us rather than on a managed platform, and the database is not shared with another service. Content is encrypted at the application layer before it is written, so a copy of the database — a backup, a stolen replica — is not readable on its own.
The specific hosting provider and region are a matter of fact about a deployment rather than about the software, and are not published here. If you need them for a due-diligence or data-protection assessment, ask at privacy@onbetterterms.com.
Sign-in providers
If you sign in with Google or Apple, that company learns you signed in to OnBetterTerms and returns your email address. They receive nothing else, and they never receive anything you write. Signing in by email link, password or passkey involves neither of them.
What none of them get
- Your content is not used to train anyone’s model. That is stated in the AI disclosure, and the contractual guarantee behind it is on the list of things counsel still needs to confirm.
- There is no advertising network, no analytics vendor that profiles you across the web, and no data broker. Analytics record that an action happened, never what it said.
- Nothing you mark never-shared is included in any request whose output another person can see — by construction, not by instruction. The privacy model explains how.
Changes
If a vendor is added or replaced, this page changes with it, and the status on each entry reflects configuration rather than intent — so it cannot describe an arrangement that is no longer true. Questions: privacy@onbetterterms.com.