Who else touches your data.

Supabase — authentication, the database, and the realtime messaging behind live cursors, presence and comments; it can see everything the product stores.

Resend — delivery of transactional email — invitations, confirmations, password resets; it sees your email address and the content of that email.

Stripe — payments as the merchant of record: checkout, tax, receipts and invoices, the billing portal and payment support; it sees your email address, name, billing address and payment details — card numbers go straight to Stripe and never reach our servers.

OpenRouter and the AI model providers it routes to — assistant requests; it sees the diagram text and prompt you send to the assistant, only when you invoke it.

Sentry — error reporting and server monitoring: when something breaks it receives the stack trace, the page or route, the browser and operating system, and a random event id; from our servers it also receives log lines, request timings and CPU profiles of our own code — no screen recordings, no email addresses (removed before sending), no diagram content.

Hosting — Amazon Web Services or Vercel, confirmed at launch; it runs the application, while Supabase separately hosts the database, auth and realtime messaging.