Subprocessors
Effective Date: July 27, 2026 Last Updated: July 27, 2026
These are the companies that process personal data on our behalf so that Marlo can operate. Each is bound by a data processing agreement, may use your data only on our instructions, and may not use it for their own purposes.
| Subprocessor | What it does | Data it processes | Location |
|---|---|---|---|
| Supabase | Database, authentication, file storage | Account data, entries, transcripts, audio files | United States |
| Vercel | Application hosting and delivery | Request logs, IP addresses | United States / global edge |
| OpenAI | Speech-to-text transcription | Audio recordings | United States |
| Anthropic | Transcript cleanup, recaps, insights, companion | Transcripts and entry context | United States |
| Stripe | Payment processing for web subscriptions | Name, email, billing details, payment method | United States |
| Apple | Sign in with Apple; App Store purchases | Authentication identifier, purchase records | United States |
| Resend | Transactional email | Email address, message content | United States |
AI providers and training
Our agreements with OpenAI and Anthropic prohibit the use of content submitted through their APIs to train their models. See How Marlo Uses AI for detail.
International transfers
All subprocessors above process data in the United States. For users in the EU, UK, and Switzerland, transfers rely on Standard Contractual Clauses or an equivalent lawful mechanism.
Changes
We will update this page before adding a new subprocessor that processes your personal data. If you have a data processing agreement with us and want advance notice of changes, email privacy@marlojournal.com.