Legal
Sub-processors
Third parties that may process personal data to run Inbox Wingman. We update this list when vendors change.
| Vendor | Purpose | Region |
|---|---|---|
| Google (Gmail / OAuth) | Mailbox access you authorize; identity | Per your Google account |
| OpenAI | Classification, drafts, summaries via API — not used to train models; default abuse logs up to 30 days | USA / provider regions |
| Supabase / Postgres host | Application database | As configured for the deployment |
| Vercel | Application hosting | USA / provider regions |
| Paddle | Merchant of record — checkout, tax, invoices, subscriptions, credit top-ups | UK / provider regions |
| Resend | Transactional email (daily brief, system mail) | USA / provider regions |
| Inngest | Background job orchestration | USA / provider regions |
| Google Analytics / Google Ads | Optional visit and conversion measurement (Consent Mode). No Gmail content or email addresses. | USA / provider regions |
| Ahrefs | Optional web analytics plus site audit / rank tracking. No Gmail content or email addresses. | USA / provider regions |
Last updated: September 6, 2026