Subprocessor List
Last updated: 2026-04-26
The following third-party service providers ("subprocessors") process personal information on Coshe's behalf to operate the service. We have entered into data processing agreements with each subprocessor where required by applicable law.
For background on how this list fits into our broader privacy practices, see our Privacy Policy.
| Subprocessor | Purpose | Data categories | Region | Privacy policy |
|---|---|---|---|---|
| Amazon Web Services (AWS) | Application infrastructure (compute, primary database hosting, object storage for uploaded files) | Account info, uploaded files, service data | United States (us-west-2, Oregon) | https://aws.amazon.com/privacy/ |
| MongoDB Atlas | Primary application database | Account info, task metadata, billing records | United States | https://www.mongodb.com/legal/privacy-policy |
| Google Cloud (Gemini API) | LLM inference for content extraction | File content, extraction prompts | Primarily United States | https://cloud.google.com/terms/cloud-privacy-notice |
| Google (OAuth, Sheets, Drive APIs) | Account login and Google Sheets / Drive integration (limited to the drive.file scope) | OAuth tokens, selected file metadata, sheet content (only for files you select via the Google Picker) | Global | https://policies.google.com/privacy |
| Stripe | Payment processing and subscription management | Email, billing details, payment metadata (Stripe collects full card data directly; we do not) | United States / global | https://stripe.com/privacy |
| Google Analytics (GA4) | Web traffic analytics (only with your consent) | Pseudonymous usage data, page views, events | Global | https://policies.google.com/privacy |
| Microsoft Clarity | Session replay and heatmap analytics (only with your consent) | Web interaction data, anonymized session recordings | Global | https://privacy.microsoft.com/privacystatement |
We update this list when subprocessors change. Material changes will be reflected at the top of the Privacy Policy.