This page lists the third-party providers (“subprocessors”) that ilmMind uses to operate ilmVault. We maintain it separately from our Privacy Policy so that we can keep it current as our infrastructure evolves, without re-issuing the full policy. We update this page when subprocessors change, and we update the Privacy Policy where a change materially affects how personal information is handled.
Providers
| Provider | Function | Information that may be processed |
|---|---|---|
| Supabase | Account authentication, database and related backend services | Account details, reading information, highlights, notes and application records |
| Cloudflare | File storage, content delivery, network performance and security | Uploaded files, technical requests, IP addresses and related metadata |
| DigitalOcean | Application hosting and server infrastructure | Application requests, operational data, logs and temporary processing information |
| AI service providers (see note below) | AI-generated coaching, embeddings and related AI functions | User prompts, selected or retrieved passages, relevant context and AI responses |
| Stripe and Stripe Connect | Reader payments, subscriptions, creator verification and payouts | Billing, transaction, identity-verification and payout information |
| Brevo | Transactional and optional marketing email delivery | Email address, name where provided and message content |
| Inngest | Background workflow and job processing | User, book, workflow and job identifiers and information needed to complete the relevant task |
| Optional account sign-in | Google account identifier, name, email address and profile image authorised by the user |
AI service providers
ilmVault uses a provider-agnostic AI architecture and may route different tasks to different AI service providers based on suitability, performance and cost. The providers we may use for AI generation and embeddings include:
- Google — Gemini family models
- Anthropic — Claude family models
- OpenAI — GPT family models
All AI providers are engaged under commercial/API terms. We do not authorise any of them to use ilmVault customer content to train their general foundation models. See sections 4.4 and 7 of the Privacy Policy for detail.
Subprocessor changes
We may add, replace or remove subprocessors as the Service evolves. Where required, we will provide notice of material changes as described in our Privacy Policy. Each provider also handles personal information under its own privacy terms.
For questions about our subprocessors or international data transfers, contact [email protected].