In accordance with Article 28 of the General Data Protection Regulation (GDPR), ThreadMemory maintains this list of third-party sub-processors that process personal data on our behalf. Each sub-processor is bound by data processing agreements that require them to protect your data to the same standard we commit to in our Privacy Policy.
Current Sub-Processors
| Sub-Processor | Data Processed | Purpose | Location |
|---|---|---|---|
| OpenAI | Message text, author names, channel names | AI classification, embedding generation, content generation | United States |
| Google (OAuth) | User profile data (name, email, profile picture) | Authentication | United States |
| Neon | All database content (encrypted at rest) | PostgreSQL database hosting | Configurable region |
| Vercel | Request/response data, webhooks | Application hosting and edge delivery | United States |
| Paddle | Customer email, billing events | Merchant of Record — payments, taxes, invoicing, refunds | United Kingdom |
| PostHog | User ID, email, page views, session replays | Product analytics | European Union |
| Resend | Recipient email, email content | Transactional email delivery | United States |
| Slack | API requests with bot tokens | Reading messages from monitored channels | United States |
| Discord | API requests with bot tokens | Reading messages from monitored channels | United States |
| Telegram | API requests with bot tokens | Reading messages from monitored channels | Multiple |
| Notion | AI-generated artifacts | Delivering classified content to connected tools | United States |
| GitHub | AI-generated artifacts | Delivering classified content to connected tools | United States |
| Jira (Atlassian) | AI-generated artifacts | Delivering classified content to connected tools | Multiple (Atlassian Cloud) |
| Confluence (Atlassian) | AI-generated artifacts | Delivering classified content to connected tools | Multiple (Atlassian Cloud) |
Changes to Sub-Processors
We will notify customers at least 14 days before adding or replacing a sub-processor, giving you the opportunity to object. Notifications are sent via email to the workspace owner's registered email address.
If you object to a new sub-processor, you may terminate your subscription before the change takes effect by contacting us at [email protected].
Contact
For questions about our sub-processors or data processing practices, please contact us at [email protected].