Legal

Subprocessors

Last updated July 2026

A subprocessor is a third party we rely on to deliver the Service. We choose them carefully and only share what each one needs to do its job. This list is kept current — check back if you want to see what's changed.

Who we use

SubprocessorPurposeLocation
SupabaseDatabase, authentication, and row-level-secured storage for your sessions, messages, memory, and integration tokens.
E2BEphemeral, isolated cloud sandboxes where the agent actually runs commands, edits files, and executes code.USA
OpenRouterRoutes your selected mode's (Fast or Deep) requests to the model provider powering it — no data is retained beyond serving the request.USA
GoogleOAuth sign-in and, when you connect them, Calendar/Gmail/Drive access on your behalf via the scopes you grant.USA
VercelHosts the application and serves requests.Global edge network

Notice of changes

If we add or replace a subprocessor in a way that materially changes how your data is handled, we'll update this page and, where required, notify you directly.

Questions

Reach us at fulminare@walnutlabs.in.