Legal
Subprocessors
Last updated July 31, 2026
What this is
To run Wend we rely on a small set of trusted third-party services (“subprocessors”). Each one processes data only on our instructions, under a data processing agreement, and only for the purpose listed below. This page is the canonical list referenced by our Privacy Policy.
We never sell your data, and none of these providers train their models on it. Content sent to AI providers is processed to give you a result and is not used to improve their models. Wend stores all data in the United States. For users in the EU, EEA, or UK, transfers to these US-based subprocessors are covered by Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914) plus supplementary technical safeguards.
Current subprocessors
Supabase
Privacy ↗Primary database, authentication, file storage, vector search
- Data
- Your account, your relationship graph, and any files you upload
- Location
- USA (Virginia). EU/EEA/UK transfers covered by Supabase's Standard Contractual Clauses.
Vercel
Privacy ↗Web application hosting and content delivery
- Data
- Request metadata and server logs
- Location
- USA
Cloudflare
Privacy ↗DNS, edge configuration, and hi@ email forwarding
- Data
- Domain traffic metadata; email sent to our hi@ address
- Location
- USA / global edge
Microsoft Azure
Privacy ↗Primary AI inference — reading and organizing your graph, drafting, chat/email extraction, understanding images you upload, transcribing voice notes and meeting recordings, and the text embeddings that power semantic search of your graph
- Data
- The content processed by the AI: chat messages, profile text, uploaded images, audio and video, documents, and — if you connect Gmail — email text
- Location
- USA
Featherless AI
Privacy ↗AI inference (open models) — standby capacity for the same processing, not currently in the serving path
- Data
- The content processed by the AI: chat messages, profile text, uploaded documents, and — if you connect Gmail — email text
- Location
- USA
Anthropic (Claude)
Privacy ↗AI inference backstop — used only when the primary AI lanes are unavailable
- Data
- The content you submit for processing (messages, profiles, uploaded documents, connected-email text)
- Location
- USA
Resend
Privacy ↗Transactional email delivery (verification, digests, receipts)
- Data
- Your email address and the contents of those messages
- Location
- USA
Bright Data
Privacy ↗Public-web person records — only when you spend a credit to enrich someone
- Data
- The public profile URL or name being looked up. Never your graph, and never the other people in it
- Location
- USA / Israel
Tavily
Privacy ↗Web search — the fallback path for enrichment when no public record is found, and only when you explicitly enrich a person
- Data
- The search query (e.g. a name) — never your graph
- Location
- USA
Expo
Privacy ↗Mobile push-notification delivery (brokers to Apple/Google)
- Data
- Your device's push token
- Location
- USA
PostHog
Privacy ↗Product analytics and error tracking
- Data
- A pseudonymous user ID, page views, feature events, and error reports — never your graph contents
- Location
- USA
Stripe
Privacy ↗Payment processing for subscriptions (active once billing is enabled)
- Data
- Billing details and payment method, handled directly by Stripe
- Location
- USA
Changes
We update this list before any new subprocessor begins handling your data. Material changes are reflected in the “last updated” date above; if you have a data processing agreement with us, we notify you per its terms. Questions: [email protected].