Privacy

Sub-processors

Last updated: 12 May 2026

We use the following sub-processors to operate the Service. Each is bound either by a Data Processing Agreement we signed directly or by their published Data Processing Addendum, and each provides the technical and organizational measures required by GDPR Article 28.

Sub-processorPurposeDataLocationSafeguards
Replit, Inc.Application hosting (compute, networking, deployment)All data passes through hosted computeUnited StatesDPA + SCCs
Postgres database host (managed via Replit)Primary application database, encrypted at restAll persistent application dataUnited StatesDPA + SCCs
Object storage (managed via Replit)Stores uploaded workspace logosLogo image bytes onlyUnited StatesDPA + SCCs
OpenAI, L.L.C.LLM analysis of open-text frustrations (clustering, theming, architecture suggestion)Open-text response content; no account identifiers sentUnited StatesEnterprise API terms; no training on customer prompts
Anthropic, PBCLLM analysis (alternative provider for the same purposes)Same as OpenAIUnited StatesEnterprise API terms; no training on customer prompts
Twilio SendGrid, Inc.Transactional and operational email (digest, arc alerts, bounce handling, peer-leader scripts)Recipient email address; subject + body of emailUnited StatesDPA + SCCs
Stripe, Inc.Payment processing for paid plansBilling email, customer ID, subscription state. Card data is collected directly by Stripe and never touches our servers.United States; EEA / UK presenceDPA + SCCs

Change notification

We will publish any addition or replacement of a sub-processor on this page at least 14 days before the change takes effect, and will email workspace admins. You may object by emailing privacy@frustrationcondition.com; if we cannot accommodate the objection you may terminate the affected workspace and we will refund any unused prepaid fees.

Related — Privacy policy · Cookie inventory