Simple Agent uses the following third-party services that may process personal data on your behalf. All subprocessors are bound by a Data Processing Agreement (DPA) or Standard Contractual Clauses (SCCs). We notify customers at least 30 days before adding or replacing any subprocessor.
| Provider | Role | Data Processed | Location | Privacy Policy |
|---|---|---|---|---|
| OpenRouter | Chat generation gateway (Gemini) and embedding API gateway/router | Conversation content for transient generation; document chunks and query text for embeddings (transient; data_collection: deny) | USA | Privacy policy ↗ |
| Parasail | Text embeddings inference (BGE-M3, pinned via OpenRouter) | Document chunks and query text for embedding (transient) | USA | Privacy policy ↗ |
| Vercel | Hosting, edge network, serverless functions | Request logs, IP addresses (edge-level) | Global (edge) | Privacy policy ↗ |
| Neon | PostgreSQL database (SA-East-1 for BR clients) | All structured personal data: email, name, conversation records | BR (SA-East-1) | Privacy policy ↗ |
| Cohere | Text reranking (rerank-v3.5) | Document chunks and query text sent for reranking (transient) | USA / CA | Privacy policy ↗ |
| Resend | Transactional email delivery | Email address, message content | USA | Privacy policy ↗ |
| Stripe | Subscription billing, hosted checkout, invoices, and customer portal | Billing data, card tokens (no raw card data reaches Simple Agent) | USA | Privacy policy ↗ |
| Sentry | Error monitoring (PII scrubbed before send) | Stack traces, error context (PII recursively scrubbed) | USA | Privacy policy ↗ |
This list reflects subprocessors active as of July 2026. Changes will be notified per DPA Section 4 (30-day advance notice). Questions? legal@simple-agent.me