Version: 2026-10-17
Effective: 17 October 2026
Language: English (authoritative)
In plain language
This list covers Intelext’s service providers. The DPA applies to providers that process personal data on your organization’s behalf.
1. Providers and data flows
| Provider | Purpose and data | Location and retention |
|---|---|---|
| Supabase | Database, authentication, storage, and server functions. Receives account data, customer content, preferences, IP addresses, and technical records. | Primary project: Frankfurt, Germany. Support and downstream processing can involve other countries. Local data follows our retention schedule. Provider backup retention depends on the configured plan. |
| Amazon Web Services (AWS Lightsail) | Website and backend hosting, including font delivery. Processes IP addresses, request metadata, assistant prompts, and selected context. | Primary hosting: Frankfurt, Germany. Support can involve other countries. Infrastructure logs and backups follow the configured provider lifecycle. |
| OpenAI | AI answers, summaries, embeddings, memories, briefings, Insights, and web search. Receives prompts, relevant conversation/profile context, watch-topic text, and source evidence. We do not add account IDs or user session tokens. | Processing can occur outside the EEA. Requests disable response storage where supported. Default API abuse-monitoring logs can retain content for up to 30 days. API content is not used for model training by default. |
| TypeSafe AI, Inc. | Automatic skill selection. Receives the question, up to four recent messages of 400 characters each, and skill descriptions and exclusions. Manual selection bypasses TypeSafe. | Published policy states US hosting. Its DPA includes EU Standard Contractual Clauses. Account-specific safeguards, retention limits, and deletion routes remain unconfirmed. Its API agreement excludes training without prior consent but permits telemetry, abuse-prevention, and legal uses. |
| Resend | Email delivery. Receives addresses, message bodies, delivery events, and metadata. Contact notifications include the sender’s name, email, subject, and message. Weekly email includes personalized updates and action links. | Locations and retention follow the applicable provider agreement and configuration. Local delivery logs remain for 12 months. Provider message copies, suppression lists, and security logs have separate retention rules. |
| Google mail service | Operator inbox. Receives names, email addresses, subjects, and message content sent to the operator. | Public MX records route intelext.io mail to Google. Account-specific region, safeguards, and retention remain unconfirmed. Mailbox cleanup is separate from database cleanup. |
| PostHog | Optional analytics after consent. Receives page paths, pseudonymous identifiers, approved feature events, and limited browser/device context. Direct identifiers, raw searches, full URLs, and content identifiers are excluded. | EU Cloud. We target 12-month event retention, but the provider setting remains unconfirmed. Session replay is disabled. Withdrawal resets analytics browser state. |
An EU hosting region does not exclude access from other countries. Transfers outside the EEA require an applicable adequacy decision or another lawful safeguard, such as EU Standard Contractual Clauses. Provider logs, backups, suppression lists, and legally retained copies can outlast local deletion.
TypeSafe publishes an API agreement, DPA, and Privacy Policy. Public provider documents do not establish our account-specific settings.
Optional browser voice input can use your browser or operating-system speech provider. Intelext receives the transcript.
2. Changes and contact
For processing under the DPA, we notify customers before adding or replacing a subprocessor. Customers can object on data-protection grounds before the change. If no suitable alternative exists, they can stop the affected feature or service.
Send questions about providers, available transfer safeguards, or objections to stefan@intelext.io. The Privacy Notice explains local retention and your rights.