Sub-processors
Updated 20 October 2026The providers that process personal data for Star and Starspace. This is the canonical list our Privacy Policy and DPA name. We update this list before a new provider starts processing your content. Business customers get 30 days' notice by e-mail and may object (DPA section 5).
| Provider | What it does | Where | When | Their terms |
|---|---|---|---|---|
| AI and voice | ||||
| Anthropic | AI language model (Claude) | United States | always | Commercial terms · DPA |
| ElevenLabs | speech recognition and voice | United States | always | Terms · DPA |
| OpenRouter | AI routing service that passes requests to language model providers | United States | always | Terms · Privacy |
| Surplus Intelligence | AI capacity marketplace that passes requests to language model providers | United States | always | Terms · Privacy |
| Cartesia | speech recognition and voice, backup | United States | when ElevenLabs is unavailable | Terms · DPA |
| Web search | ||||
| Exa | web search | United States | when Star searches the web | Terms · Privacy |
| DeepSeek | web search and answers, fallback | China | when Star searches the web and Exa is unavailable | Privacy |
| Hosting and storage | ||||
| Worldstream | servers, storage and backups | Netherlands | always | Legal |
| Network and access | ||||
| Cloudflare | web address, network delivery, encryption in transit | worldwide, nearest data centre (list at cloudflare.com/network) | always | Customer DPA |
| Tailscale | secure access to our servers | Canada, United States | always | Terms · DPA |
| Key storage | ||||
| 1Password | storage of our keys | United States, Canada | always | Terms · Privacy |
| Resend | sending e-mail | United States | if switched on | Terms · DPA |
| Amazon Web Services (SES) | sending e-mail | United States | always | Service terms · DPA |
| Payments | ||||
| Stripe | payments | United States | paid plans | DPA |
| Optional features | ||||
| Hunter.io | public company and contact look-ups | France | if switched on | Terms · Privacy |
| Clay | public company and contact look-ups | United States | if switched on | Terms · DPA |
| Google, Apple, OpenAI | sign-in with your account at that service | United States | if you choose that sign-in | Google privacy · Apple privacy · OpenAI privacy |
| Gmail and Calendar you connect | United States | if you connect them | Workspace data processing terms | |
| Telegram, Meta (Facebook, Instagram, WhatsApp), Zernio | messaging and social accounts you connect | as published in each provider's privacy notice | if you connect them | Telegram privacy · Meta privacy · Zernio privacy |
| Open-Meteo | weather for your location | as published in its privacy notice | if switched on | Terms |
| Unsplash, Openverse | image search | United States | if switched on | Unsplash privacy · Openverse privacy |
| fal.ai | images | United States | if switched on | Terms · Privacy |
| Google Firebase | phone notifications | United States | if switched on | Data processing terms |
| Analytics | ||||
| (none yet) | analytics: how our sites and the Service are used | not yet in use | listed here before first use | not applicable |
Questions, or a copy of the transfer safeguards: legal@mainstar.ai.