Subprocessors
Last updated: October 6, 2026
Sensefold uses the third parties below to process personal data on our behalf. Each is bound by a data processing agreement, except Google Fonts, which our server uses under the Google APIs Terms of Service. The AI providers are contractually prohibited from using your content to train their models. Apple is listed for completeness: it is the platform we distribute the iOS app through, not a processor we engage.
AI clients you connect over MCP (for example Claude, ChatGPT, Cursor, or Claude Code) are not subprocessors. They receive library content only on your instruction and under their own terms; see the Privacy Policy for details.
AI & content processing
- Google Cloud (Vertex AI / Gemini) — Summaries, tags, search embeddings, result ranking, image understanding (OCR and visual descriptions), and processing of YouTube links. United States. DPA
- LlamaParse (LlamaIndex) — Text extraction from PDFs and documents you upload. United States.
Infrastructure
- Cloudflare (Workers, Queues, R2, Browser Rendering) — API server at api.sensefold.app (including the browser-extension API and the MCP server), background processing, file storage (R2), fetching and rendering of web pages you save, image processing (Cloudflare Images) of photos you put on share pages, generating link-preview images for share pages, and hosting of this website, share pages, and the web app. Global edge network, primarily United States. DPA
- Fly.io — An isolated extraction container (lexi-tools) that extracts content from files and non-webpage links you save. United States.
- Neon — Primary PostgreSQL database storage. DPA
- Clerk — Authentication: sign-in, session management, and account identity. United States. DPA
- Google Fonts (Google LLC) (no DPA) — Font files for drawing share page titles in link-preview images when a title has characters our own fonts do not cover, such as Chinese. Our server requests a font for just those characters, so the request includes them; it does not include your @handle or the page link. United States. Terms
Payments & platform
- Stripe, Inc. — Web subscription and credit-pack payments, invoices, and the billing portal. Sensefold never receives or stores card numbers. United States. DPA
- Apple Inc. (platform) — App Store purchases and subscription management for the iOS app, and Apple Push Notification service for silent background sync pushes and optional daily review notifications (item count and one saved item’s title) to the iOS app. United States. Privacy policy
Analytics
- PostHog, Inc. — Product and website analytics. Session replay is used only in the signed-in web app, with input values and user content masked. United States. DPA
- Plausible Community Edition / OVHcloud — Cookieless website analytics on an Oregon, United States VPS during the scheduled decommission of Plausible. United States.
Changes
We will update this page before engaging a new subprocessor. To be notified of changes, contact us at support@sensefold.app.
- 2026-10-06 — Cloudflare also processes photos shown on share pages (Cloudflare Images), generates their link-preview images, and hosts share pages. Added Google Fonts for drawing link-preview titles in scripts our own fonts do not cover, such as Chinese.
- 2026-09-03 — Added Stripe and Apple under Payments & platform; corrected the Cloudflare and Fly.io roles; removed the retired chat purpose from Google Cloud; added locations and DPA links.
- 2026-08-23 — Added PostHog for product and website analytics.
- 2026-07-09 — Added self-hosted Plausible website analytics.
- 2026-06-22 — Initial list.