Subprocessors

What processes your data

DeepSeek receives assistant messages and the story context needed to answer them. OpenAI receives plain text selected for semantic search and returns numeric embeddings. Both are used only after the current privacy disclosure has been accepted; changing either provider is a material policy change that requires a new decision.

DeepSeek may process data in the People’s Republic of China. OpenAI may process API data in the United States and other locations where its contracted infrastructure operates. The exact retention and use commitments are the ones that apply to Telleny’s API accounts; the privacy policy explains those limits without promising immediate deletion that the public provider terms do not guarantee.

Beyond the assistant, Hetzner hosts the application service in Germany; Supabase provides the managed PostgreSQL database and private attachment storage; Google and Firebase support sign-in and notifications; RevenueCat reconciles subscription status from Apple and Google; Cloudflare serves DNS and routes website traffic and role email. Apple and Google process store billing under their own account terms.

Telleny sends its own verification and password-reset mail from a machine it runs itself, so no third party handles that. None of these is an advertising, analytics or profiling service, because Telleny uses none.

How this is kept current

A new provider will be named here and in the privacy policy before it receives customer data, except where a security incident requires an immediate protective change. A material change to an AI provider, its purpose, or the categories it receives makes earlier consent out of date. For a data protection assessment or current contractual details, write to the address on the privacy policy.