Legal & trust centre
Sub-processors
These providers process personal data for us, on our instructions, to run Identty.
Last updated 4 November 2026 · Version 2026-11-04
Current providers
| Provider | What they do for us | Data involved |
|---|---|---|
| Supabase | Managed PostgreSQL database | Account, profile and content records, consent records, sessions |
| Cloudflare | DNS, network protection (DDoS and bot filtering), R2 object storage for uploaded files, Turnstile bot check on public forms | Network metadata such as IP address; uploaded files (profile photos, portfolio images, credential documents) |
| Application hosting | The server infrastructure on which the Identty application and cache run | Data in transit and in memory while the service runs; request logs |
| Optional “Sign in with Google”, and email delivery (SMTP) for sign-in codes and service messages | Your email address and Google account identifier; the email content (such as your sign-in code) | |
| Umami and GlitchTip (self-hosted) | Cookie-free website analytics and error reporting, run by us on our own server | No third party receives this data. It is processed on the same infrastructure as the application; error reports are kept for about 90 days |
| OpenRouter and the AI model providers it routes to | Generate AI suggestions and feedback when you use AI features | Only the text you submit to an AI feature, with obvious personal identifiers removed where we can |
Notes
Some providers may process data outside India. We choose providers that offer appropriate security and we bind them to process data only for the purposes we set. If we add or replace a provider that processes personal data we will update this page and the date above.
Questions about our providers? Write to [email protected]. See also the Privacy Policy.