Data processing and subprocessors

Operators

Render hosts the application and the persistent disk that holds the workspace file.

Google OAuth checks the email address you use to sign in. We receive the verified email and a subject id. We do not receive your Google password.

Stripe processes subscription payments when a plan has a price and you start Checkout. Stripe stores the payment method. We store the customer id, subscription id, and status.

Buffer receives the text of an approved organic post when the owner schedules it. The Buffer token is encrypted at rest and is sent only to Buffer.

Fastmail holds support mail for hello@sublimnl.app and support@sublimnl.app. Fastmail does not post into the app by itself. Inbound reporter mail is a separate endpoint that stays off until its secret is set.

A connected founder mailbox (Google, Microsoft 365, or the mail host they name) receives an approved Drop, either sent or saved as a draft. Sublimnl does not edit that domain's DNS. The drop.sublimnl.app sender, when chosen, goes out through Resend or Amazon SES, or through DROP_EMAIL_URL, and only after those keys are set. Customers do not edit DNS for that subdomain. Open alerts use the same transport.

Optional

A language pack can call OpenAI or xAI if an operator sets that key. The default deploy does not. When it is off, the pack stays on this server.