Legal

Subprocessors

Last updated and effective:

These are the companies that process personal information on our behalf to provide the Services: your VektorForgeAI account, our Platforms and our website. Each works under a written contract that limits its use of the information to providing its service to us and requires it to meet the same data protection obligations as our Data Processing Addendum. “Used for” shows which parts of the Services use each one. This page forms part of our Privacy Policy; see also our Data Processing Addendum.

Subprocessors

Supabase

  • Purpose: databases, sign-in, file storage and server functions
  • Used for: your VektorForgeAI account and every Platform (each in its own database)
  • Data: account information and Your Content, including uploaded files
  • Location: United States (AWS, Oregon region)

Vercel

  • Purpose: hosting the Platforms, the accounts site and our website; cookieless page-view analytics
  • Used for: all of the Services and our website
  • Data: web requests (including IP addresses, which we do not store) and aggregate page views
  • Location: United States, with a global network for delivering pages

Anthropic

  • Purpose: Claude AI models for the AI features you use; web search for AI research features
  • Used for: Product Architect and Program Forgemaster (and Systems Alloysmith’s AI features when it launches)
  • Data: the content sent with each AI request (see How VektorForgeAI uses AI)
  • Location: United States

Stripe

  • Purpose: payments, subscriptions, invoices and the billing portal
  • Used for: paid plans on every Platform
  • Data: billing name, email, address, payment details (entered only on Stripe’s pages) and subscription history
  • Location: United States

Resend

  • Purpose: sending service emails (sign-in, invitations, plan and billing notices, report confirmations, replies to your messages)
  • Used for: Product Architect, Program Forgemaster, your VektorForgeAI account and our website
  • Data: recipient email addresses and email content
  • Location: United States

Microsoft

  • Purpose: business email (Microsoft 365), where messages to us and replies to our emails arrive; sign-in and multi-factor authentication for our staff
  • Used for: all of the Services and our website
  • Data: the content of emails you exchange with us, and our staff’s account information
  • Location: United States

Cloudflare

  • Purpose: bot and spam protection (Turnstile) on sign-in, sign-up and password-reset forms and our website forms
  • Used for: your VektorForgeAI account, Product Architect and our website
  • Data: browser and device signals from people using those forms
  • Location: global network

Atlassian

  • Purpose: Jira, where we track the work on bug and service incident reports we accept
  • Used for: reports from every Platform
  • Data: the description and technical details of accepted reports (page, browser and device type, app version and error messages); not screenshots, and not the reporter’s name or email
  • Location: Atlassian’s cloud data centers, in the United States and other regions where Atlassian operates
  • Starts: November 16, 2026. Until then, accepted reports are tracked only in our own systems.

Third-party services you choose to connect

When you connect Atlassian Jira, ClickUp, Slack or Microsoft Teams, or an external AI assistant, we send the information you choose to those services on your instruction. They act under their own terms with you, not as our subprocessors. Separately, we use Atlassian Jira ourselves to track accepted bug and service incident reports, as listed above.

Changes

We will update this page at least 30 days before a new subprocessor starts processing personal information. Business customers may object, as described in our Data Processing Addendum. To be told about changes by email, write to info@vektorforgeai.com.