Subprocessors
Last updated September 24, 2026
These are the service providers that process personal data for CMD-OS, under written contracts that hold them to data-protection obligations at least as strict as those in our Data Processing Addendum. This list is generated from the services this deployment is actually configured to use.
| Entity | Purpose | Location | Data | When |
|---|---|---|---|---|
| Stripe, Inc. | Subscription billing and payments | United States | Name, email, billing address, payment method (held by Stripe, never by us) | Always |
Services you connect
Google (Calendar and Gmail), GitHub, IMAP mailboxes and AI apps you authorise through Agent access (such as Claude, ChatGPT, Grok or Cursor) are not our subprocessors: you choose to connect them and instruct us to exchange data with them, under your own agreement with each provider.
Changes
We give at least 30 days' notice before adding or replacing a subprocessor, by updating this page and emailing account holders. If you have a reasonable data-protection objection, tell us at the contact address on our Contact page within that period; if we can't resolve it, you may cancel and we will refund any prepaid fees for the remaining period.