Subprocessors
Last updated: August 7, 2026
These are the third parties that process data on our behalf to make App Zoo work. This list is part of our privacy policy. We keep it complete rather than convenient — including the AI providers, which is the part most products leave out.
Infrastructure
Google Cloud Platform
Hosting, application database (Cloud SQL), file storage, logging. The product runs here.
Data: Everything in your workspace. · Processed in: United States
Google Firebase
Authentication and identity, plus some document storage.
Data: Email, name, profile photo, sign-in provider, session tokens. · Processed in: United States
AI model providers
When you talk to an assistant, or an assistant runs a tool for you, the content involved goes to one of these providers to be processed. All three are used under commercial API terms that prohibit training on our customers' content. Which provider handles a given request depends on the assistant and the task.
Anthropic
Claude models — the default engine behind most assistants and agent tools. Also runs server-side web search on our behalf when an agent researches the open web (for example, pricing an item you are selling).
Data: Your prompts and the workspace context needed to answer them. When web search runs, the search queries — which are derived from the item being researched, such as its brand, model and condition — are sent to Anthropic and on to its search provider. · Processed in: United States
Google (Gemini API)
Gemini models, used for several assistants and bulk tasks.
Data: Your prompts and the workspace context needed to answer them. · Processed in: United States
OpenAI
GPT models, used for specific tools where they perform better.
Data: Your prompts and the workspace context needed to answer them. · Processed in: United States
Payments, banking and email
Stripe
Payments and subscription billing.
Data: Email, billing address, card details (collected by Stripe directly — never by us). · Processed in: United States
Plaid
Bank connections for Cashflow. Holds your bank credentials so we never do.
Data: Bank account details, balances, transaction history — only for accounts you connect. · Processed in: United States
Resend
Transactional email — invites, notifications, digests.
Data: Email address, recipient name, message content of the email itself. · Processed in: United States
Analytics — consent-gated
None of these load unless you allow them. Session replay is a separate choice from analytics and is off unless explicitly switched on. Manage this from the Cookies link in the footer.
Google Analytics 4
Page-view and feature-usage analytics.
Data: Pseudonymous ID, pages viewed, events. Only with your consent. · Processed in: United States
Mixpanel
Product funnel analytics.
Data: Pseudonymous ID, feature events. Only with your consent. · Processed in: United States
Microsoft Clarity
Session replay and heatmaps.
Data: Recorded interaction with App Zoo pages. Only with your consent, which is off by default. · Processed in: United States
Changes to this list
We'll update this page when we add or remove a subprocessor. If you have a data processing agreement with us and want advance notice of changes, email dan@appzoo.ai and we'll add you to the notification list.