Subprocessors
Companies that can process data on our behalf, what each one actually receives, and whether it is in use right now.
Right now, inference goes to OpenAI, transcription goes to OpenAI, and email is delivered by a mail service we use. Each entry below says whether it is in use, and that comes from what the product is actually doing rather than from a list somebody edits by hand.
- OpenAIIn use
AI inference for every model-backed feature — guidance, mediation, de-escalation, drafting, insights, safety classification — and speech-to-text for voice notes.
- Data involved
- The same per-request text as above for inference; the audio of a voice note for transcription.
- Required
- Required
- Processing region
- United States
- StripeNot in use
Payments, for anyone who chooses a paid plan, when Stripe is the selected processor.
- Data involved
- Your email address, an account identifier, and the plan you chose. Card details go to Stripe directly and never reach our servers.
- Required
- Only if enabled
- Processing region
- United States, with regional processing
- PayPalNot in use
Payments, for anyone who chooses a paid plan, when PayPal is the selected processor.
- Data involved
- Your email address, an account identifier, and the plan you chose. Payment details are given to PayPal directly and never reach our servers.
- Required
- Only if enabled
- Processing region
- United States
Delivering push notifications to the phone app, via Apple and Google.
- Data involved
- A device push token and the notification text. Notifications carry no relationship content unless you have switched that on.
- Required
- Only if enabled
- Processing region
- United States
Storing voice recordings, when object storage is switched on. With it off they stay on our own infrastructure.
- Data involved
- The audio of a voice note, under a key that contains no account, space or date. Nothing else is stored there.
- Required
- Only if enabled
- Processing region
- Wherever the configured bucket is
Hosting and storage
The application and its database run on infrastructure operated directly by us rather than on a managed platform, and the database is not shared with another service. Content is encrypted at the application layer before it is written, so a copy of the database — a backup, a stolen replica — is not readable on its own.
The specific hosting provider and region are not published here. If you need them for a due-diligence or data-protection assessment, ask at privacy@onbetterterms.com.
Signing in
No third party is involved in signing in. It is an email link, a password or a passkey — and a passkey never leaves your device, so not even we receive it. There is no “continue with” button here, and no company learns that you have an account with OnBetterTerms because you signed in to it.
What none of them get
- Your content is not used to train anyone’s model. That is stated in the AI disclosure, and it is what we require of every provider on this page.
- There is no advertising network, no analytics vendor that profiles you across the web, and no data broker. Analytics record that an action happened, never what it said.
- Nothing you mark never shared is included in any request whose output another person can see — by construction, not by instruction. The privacy model explains how.
Changes
If a vendor is added or replaced, this page changes with it, and the status on each entry reflects configuration rather than intent — so it cannot describe an arrangement that is no longer true. Questions: privacy@onbetterterms.com.