Who helps deliver your program.

Platform hosting.

Information handled

Application requests, account and program information needed to serve those requests, and operational logs.

Processing locations

The deployments reviewed use United States application compute. Content delivery and supporting operations may involve other countries.

Core platform services.

Information handled

Account details, program records, claims, and uploaded supporting files.

Processing locations

The program databases reviewed are hosted in United States regions. The specific region is recorded for each deployment. Support and content delivery may involve other locations under the provider’s terms.

Email communications.

Information handled

Email addresses, message contents, and delivery events.

Processing locations

Resend lists United States subprocessors for hosting and email delivery. Delivery also involves recipients’ email providers.

Programs with messaging enabled.

Information handled

Phone numbers, message contents, media submitted through messaging, and delivery events.

Processing locations

Twilio’s default messaging region is the United States (US1). The agreed messaging configuration and carrier routes determine the applicable processing locations.

Programs with payments enabled. Stripe acts as a processor or an independent controller depending on the activity, under its terms.

Information handled

Payment and billing details, customer identifiers, and transaction information needed for the payment.

Processing locations

International processing under Stripe’s data processing and transfer terms. The applicable Stripe entity and service depend on the payment arrangement.

Programs with AI enabled following customer authorization under DPA Section 14.

Information handled

Information needed for the authorized feature. For invoice reading, this includes the selected image or PDF and extraction instructions.

Processing locations

Processing locations depend on the configured API service and applicable provider terms. Any residency commitment is specified in customer-specific terms.

Model training

Incenify will not opt your program’s personal data into model training, in accordance with DPA Section 14.

Retention

Standard API abuse-monitoring logs may be retained for up to 30 days, subject to exceptions in OpenAI’s terms. Any different retention commitment depends on the applicable service configuration and customer-specific terms.