# Service Providers and Subprocessors Last updated: October 22, 2026 We use third-party providers, such as our hosting provider and customer support software, to run Vesperion Gate, Thicket and LensCherry. When we process customer-controlled personal information as a processor, the providers that handle it on our behalf are subprocessors, bound by the written data-protection terms our [Data Processing Addendum](https://www.vesperiongate.com/policies/dpa) requires. Providers may also process account-administration information for us, or act independently for their own billing, fraud-prevention or legal obligations. The following is the list of providers we use. The country shown for each one is where the company we contract with is located. Primary application data, object storage and backups are in the United States; a provider's network, support or other processing is not confined to one location. Each entry links to the provider's own data-protection information. ## Hosting, storage and delivery - **Hetzner: application hosting and databases, Ashburn, Virginia (Germany).** All products. Processes account content and the operational data needed to host the Services; active content and backups follow our [retention periods](https://www.vesperiongate.com/policies/privacy#retention). [Hetzner privacy information](https://www.hetzner.com/legal/privacy-policy/). - **Cloudflare: network security, anti-bot checks, object storage and encrypted backup storage (United States).** All products. Fronts public traffic, verifies selected forms with Turnstile, and stores uploaded files and encrypted database and configuration backups in its US R2 storage. Ordinary customer-content backups use a 28-day window; configuration backups rotate after 90 days. Network and security processing can occur globally. [Cloudflare DPA](https://www.cloudflare.com/cloudflare-customer-dpa/) and [privacy policy](https://www.cloudflare.com/privacypolicy/). - **Backblaze: offsite file backups (United States).** Thicket and LensCherry. Holds offsite replicas and version backups of uploaded and generated files; removed or replaced versions expire 28 days after the daily replica archives them. [Backblaze privacy information](https://www.backblaze.com/company/policy/privacy). ## AI generation and safety screening - **Google: LensCherry image generation and editing through the Gemini API (United States).** Receives prompts, reference images, generated images and technical request information for each request. We use the paid service, whose terms prohibit using prompts and responses to improve Google's products; they permit safety and legal processing, with a published 55-day abuse-monitoring period. New requests opt out of optional interaction storage. [Gemini terms](https://ai.google.dev/gemini-api/terms), [abuse-monitoring retention](https://ai.google.dev/gemini-api/docs/usage-policies) and [interaction storage controls](https://ai.google.dev/gemini-api/docs/interactions-overview#data-storage-and-retention). - **Google Cloud: LensCherry image safety screening through the Vision API (United States).** Receives image data and returns classification results; LensCherry records the outcomes for moderation and support. [Vision data-use information](https://cloud.google.com/vision/docs/data-usage) and [Google Cloud DPA](https://cloud.google.com/terms/data-processing-addendum). - **OpenAI: LensCherry image generation and editing through the OpenAI API, from October 14, 2026 (United States).** Announced on September 28, 2026, alongside or instead of the Gemini API. Receives prompts, reference images, generated images and technical request information. OpenAI does not use API data to train its models; it keeps abuse-monitoring logs for up to 30 days and retains image inputs its child-safety scanning flags for review. [OpenAI business terms](https://openai.com/policies/business-terms/), [API data controls](https://developers.openai.com/api/docs/guides/your-data) and [OpenAI DPA](https://openai.com/policies/data-processing-addendum/). Thicket does not use these providers to generate or summarize workspace content. An AI assistant or app you connect to Thicket yourself is covered below. ## Payments, communications, analytics and diagnostics - **Stripe: payment processing (United States).** Thicket and LensCherry. Payment details, billing addresses, transaction and subscription information, and fraud-prevention signals; required financial records can outlast account closure. [Stripe privacy policy](https://stripe.com/privacy). - **Resend: product and company email (United States).** Recipient and sender addresses, message bodies, delivery status and related metadata for sign-in, notification, billing, support and policy-update email; messages can carry activity and content previews. [Resend DPA](https://resend.com/legal/dpa) and [privacy policy](https://resend.com/legal/privacy-policy). - **Microsoft: company email and support correspondence (United States).** Microsoft 365 mailboxes receive customer correspondence and support notifications, including contact details and what those messages contain. [Microsoft Products and Services DPA](https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA). - **Plausible: analytics for Thicket's public website and signup page (Estonia).** Receives public page addresses, campaign labels, referring sites and technical browser and network information, processed in the EU without cookies or persistent identifiers; private workspace pages, account identities, form contents and conversion events are never sent. [Plausible DPA](https://plausible.io/dpa) and [visitor data policy](https://plausible.io/data-policy). - **Sentry: error reporting (United States).** Thicket and LensCherry. Error reports, traces, logs, technical context and account identifiers used to investigate reliability and security; LensCherry events can include an account email address. Retention is separate from account-content deletion. [Sentry DPA](https://sentry.io/legal/dpa/) and [privacy information](https://sentry.io/privacy/). - **Apple: push notifications to Apple devices, optional sign-in and app-store services (United States).** Receives the device, identity or transaction information the feature you use needs, and may act independently under its platform terms. [Apple privacy information](https://www.apple.com/legal/privacy/). - **Google: optional sign-in (United States).** Receives the identity information needed for sign-in with Google, and acts independently under its platform terms. [Google privacy information](https://policies.google.com/privacy). - **Expo: update checks from the retired Thicket 1.x iOS app (United States).** Until October 19, 2026, Expo delivered Thicket's mobile push notifications; those now go directly through Apple. Expo still answers the retired app's update checks, which carry technical request information such as IP addresses and app and device versions. [Expo privacy information](https://expo.dev/privacy). ## AI assistant tools used by our staff - **Anthropic: AI assistant tools used by our staff (United States).** Claude helps our staff write and review software. [Anthropic privacy policy](https://www.anthropic.com/legal/privacy). - **OpenAI: AI assistant tools used by our staff (United States).** ChatGPT and Codex help our staff write and review software. [OpenAI privacy policy](https://openai.com/policies/privacy-policy/). These tools are not part of the products and do not operate on your content. Customer content, support correspondence and identifiable production records stay out of them, and training on our conversations is turned off in each account. If we ever let one process customer data on our behalf, we will add that use here first and give notice under the Data Processing Addendum. ## Apps and AI assistants you connect An app or AI assistant you connect to Thicket yourself, from OpenAI, Anthropic, Google or anyone else, is not our subprocessor. It acts with your own access under your own agreement with its provider, which decides how it stores, reviews and trains on what it reads. The [Privacy Policy](https://www.vesperiongate.com/policies/privacy#connected-tools) explains the data flow and how to disconnect. ## Changes and questions The [Data Processing Addendum](https://www.vesperiongate.com/policies/dpa) sets the notice and objection process for a new or replacement subprocessor: we post the change in our [policy updates](https://www.vesperiongate.com/policies/updates) before the provider processes customer data, and subscribers hear about it by email or feed. Write to [privacy@vesperiongate.com](mailto:privacy@vesperiongate.com) for processing details relevant to your account or help with an erasure request involving a provider we engage.