Subprocessors

Last updated: September 3, 2026

Sensefold uses the third parties below to process personal data on our behalf. Each is bound by a data processing agreement. The AI providers are contractually prohibited from using your content to train their models. Apple is listed for completeness: it is the platform we distribute the iOS app through, not a processor we engage.

AI clients you connect over MCP (for example Claude, ChatGPT, Cursor, or Claude Code) are not subprocessors. They receive library content only on your instruction and under their own terms; see the Privacy Policy for details.

AI & content processing

  • Google Cloud (Vertex AI / Gemini) — Summaries, tags, search embeddings, result ranking, image understanding (OCR and visual descriptions), and processing of YouTube links. United States. DPA
  • LlamaParse (LlamaIndex) — Text extraction from PDFs and documents you upload. United States.

Infrastructure

  • Cloudflare (Workers, Queues, R2, Browser Rendering) — API server at api.sensefold.app (including the browser-extension API and the MCP server), background processing, file storage (R2), fetching and rendering of web pages you save, and hosting of this website and the web app. Global edge network, primarily United States. DPA
  • Fly.io — An isolated extraction container (lexi-tools) that extracts content from files and non-webpage links you save. United States.
  • Neon — Primary PostgreSQL database storage. DPA
  • Clerk — Authentication: sign-in, session management, and account identity. United States. DPA

Payments & platform

  • Stripe, Inc. — Web subscription and credit-pack payments, invoices, and the billing portal. Sensefold never receives or stores card numbers. United States. DPA
  • Apple Inc. (platform) — App Store purchases and subscription management for the iOS app, and Apple Push Notification service for silent background sync pushes to the iOS app. United States. Privacy policy

Analytics

  • PostHog, Inc. — Product and website analytics. Session replay is used only in the signed-in web app, with input values and user content masked. United States. DPA
  • Plausible Community Edition / OVHcloud — Cookieless website analytics on an Oregon, United States VPS during the scheduled decommission of Plausible. United States.

Changes

We will update this page before engaging a new subprocessor. To be notified of changes, contact us at hello@sensefold.app.

  • 2026-09-03 — Added Stripe and Apple under Payments & platform; corrected the Cloudflare and Fly.io roles; removed the retired chat purpose from Google Cloud; added locations and DPA links.
  • 2026-08-23 — Added PostHog for product and website analytics.
  • 2026-07-09 — Added self-hosted Plausible website analytics.
  • 2026-06-22 — Initial list.