Everyone who touches your data.
Six companies, and all six are Google. Each one is here because the product cannot work without it, each is under a data-processing agreement that limits them to working for us, and none of them may train a general-purpose model on what you send.
| Sub-processor | What it does | What we send it | Where |
|---|---|---|---|
| Google Cloud Platform | Hosting, storage and encrypted databases | Everything the service stores: your account, your business knowledge, your conversations | United States / EU multi-region |
| Google Gemini Enterprise | Writes the reply | The customer message, the conversation so far, and the business knowledge the reply needs | United States |
| Google Play | App distribution and subscription billing | Your purchase and subscription state. We never see a card number | United States |
| Firebase Crashlytics | Crash and error reporting | Crash traces, device model, OS version. No message content | United States |
| Firebase Analytics | Product analytics | Screen views, feature taps and funnel events, with your user and tenant id. No message content | United States |
| Firebase Cloud Messaging | Push notifications to your own phone | A device token and the notification text we send you. No customer message content | United States |
Each name links to that service's data-processing terms. For a signed copy of ours, write to support@opergen.com.
Two things this list is not.
It is not a claim that your messages stay with us. They do not. Writing a reply needs a model, the model runs on Google's AI platform, and the message goes there to be answered. That is what the second row says and it is the whole reason this page has a "what we send it" column at all.
It is not the same as our marketing stack. There isn't one. No advertising network, no session recorder, no customer-data platform, no email marketing tool holding your address. If that changes, this table changes with it, and the privacy policy commits us to fourteen days' notice before it does.
Found a security problem?
Our security.txt has the contact and what to expect: an acknowledgement within 48 hours, and no legal action against anyone reporting in good faith against their own account. Or just write to support@opergen.com.