Skip to main content

Subprocessors

Service providers that may process personal data on Lutin's behalf.

About this list

Lutin uses the providers below to operate the Service. Some providers apply only when you enable a feature, connect an account, or select a particular model. A provider's processing locations can change through its own infrastructure and subprocessors; the descriptions below summarize the information currently available to us and do not promise data residency.

Core service providers

Core service providers
Provider Purpose and data Published processing location
Railway Corporation Application, API, database, and cloud-runtime hosting; account content, identifiers, runtime data, logs, and network metadata. Primary processing operations in the United States.
Clerk, Inc. Authentication and account management; identity, profile, session, and subscription data. United States and other locations where Clerk or its subprocessors operate.
PostHog Inc. Product analytics, error diagnosis, and consented session recording; usage, device, account, performance, and diagnostic data. United States, or Germany for EU-hosted projects, with provider access in other locations where applicable.
Apple Push Notification service Mobile push delivery; device push token, app identifier, notification payload, and delivery metadata. Apple does not publish an APNs-specific processing location.

Feature-dependent providers

Feature-dependent service providers
Provider When used Data involved
Turso Cloud account-database synchronization. Account database content, account database identifier, and synchronization metadata. Turso does not publicly specify a single processing location.
OpenRouter, Inc. and downstream model providers Automatic AI model routing and fallback, including current routes to Moonshot AI, OpenAI, Z.ai, and other hosts available through OpenRouter. Prompts, relevant context, attachments, generated output, usage metadata, and a pseudonymous session identifier. Processing may continue through a selected or automatically chosen model host in the United States or globally.
OpenAI, Anthropic, Google, Fireworks AI, and Together AI Direct AI inference when the corresponding model is selected. Prompts, relevant context, attachments, generated output, and usage metadata. Processing locations vary by provider and account configuration.
Exa Web search and content retrieval when you use a search feature. Search queries, URLs, retrieval options, and returned web content.

Services you connect

Slack, Linear, Notion, Jira, Google Calendar, Gmail, Google Drive, and Google Tasks are user-directed integrations, not general Lutin subprocessors. If you connect one, that service processes data under its own agreement with you. Lutin receives only the permissions, account metadata, credentials, and content needed to perform the actions you request.

Changes to subprocessors

We may add or replace providers as the Service changes. We will update this page and its revision date before or when a material new subprocessor begins processing personal data, subject to any notice period required by an applicable agreement.

Contact

Questions about this list or a provider's role can be sent to [email protected]. See also our Privacy Policy and Security & privacy page.