Legal
Subprocessors
Last updated September 20, 2026
What this is
To run Wend Labs we rely on a short list of third-party services (“subprocessors”). Each one processes data only on our instructions, under a data processing agreement, and only for the purpose listed below. This page is the canonical list referenced by our Privacy Policy.
Read the list against what we actually hold. Your relationship graph is an encrypted database on your own Mac. None of the services below receives it, and none of them receives raw message text, mail bodies, or the contents of files you give the app. What they handle is your account, your billing, the routing record that makes one link work from any agent, the pages your agent publishes, and one short string at a time sent for search.
We never sell your data, and none of these providers train their models on it. For users in the EU, EEA, or UK, transfers to these US-based subprocessors are covered by Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914) plus supplementary technical safeguards.
Current subprocessors
Supabase
Privacy ↗Account records, sign-in, subscription state, the directory row that routes your link, and usage counters
- Data
- Your email and federated identity, billing state, one routing record per install, bucketed counters. Not your graph, which is on your Mac
- Location
- USA (Virginia). EU/EEA/UK transfers covered by Supabase's Standard Contractual Clauses.
Vercel
Privacy ↗Hosting for trywend.io and the pages your agent publishes
- Data
- Request metadata, server logs, and the rendered payload behind a link you published
- Location
- USA
Cloudflare
Privacy ↗DNS and edge for trywend.io, email forwarding for hi@ and privacy@, and the tunnel that lets a web agent reach your Mac while it is awake
- Data
- Domain traffic metadata, mail sent to our addresses, and agent traffic in transit
- Location
- USA / global edge
Microsoft Azure
Privacy ↗Text embeddings, which turn a short string such as a name, role, or company into the vector that makes search work
- Data
- The short text being embedded. Never raw message text, mail bodies, or file contents
- Location
- USA
Resend
Privacy ↗Transactional email delivery (verification, receipts, notices)
- Data
- Your email address and the contents of those messages
- Location
- USA
AgentPhone Pro
Privacy ↗Text message (SMS) delivery for the messages you opt into, such as the link you request with "Text me the link" and account or security notifications
- Data
- Your mobile number, the message content, delivery information, and related metadata. Never your graph, and never shared for marketing
- Location
- USA (operated by Relay Innovations, Inc., New York)
PostHog
Privacy ↗Website analytics and error tracking
- Data
- A pseudonymous user ID, page views, feature events, and error reports. Never anything from your graph
- Location
- USA
Stripe
Privacy ↗Payment processing for subscriptions
- Data
- Billing details and payment method, handled directly by Stripe
- Location
- USA
Tavily
Privacy ↗Web search on Wend's own key, for non-person lookups only. It is not offered as a research provider
- Data
- The search query, never your graph
- Location
- USA
Your own cloud is not our subprocessor
If you turn on the cloud option, the app deploys a database and a small open-source proxy into a Cloudflare account that you create and own. That deployment is your infrastructure. You contract with Cloudflare directly, under their terms, and the bill is theirs to you. We route agent traffic to it when your Mac is off, and we can patch the proxy template if you let us, but we are not the customer of that account and it is not a vendor acting on our instructions.
Cloudflare also appears in the list above, and that is a separate relationship: our own DNS, edge, mail forwarding, and the tunnel. Two relationships with the same company, and only one of them is a subprocessor of ours.
Research runs on your own account
Wend does not buy person records and resell them to you. If you want public background filled in, you connect your own account with a data provider (Bright Data today) and the app uses your key on your Mac, so the contract, the terms, and the billing are between you and them. They are not our subprocessor, and they receive one profile lookup at a time, never your graph and never the other people in it. Their privacy policy is at brightdata.com.
Changes
We update this list before any new subprocessor begins handling your data. Material changes are reflected in the “last updated” date above; if you have a data processing agreement with us, we notify you per its terms. Questions: [email protected].