Legal

Subprocessors

Last updated August 9, 2026

The third parties that process personal data on our behalf when you use LinkedIn Voice Builder, what each one actually receives, and what it does with it.

1. How to read this page

A subprocessor is a company we engage to process personal data on our behalf so the product can work — for example, to take a payment or to generate a draft. Each is bound by a contract limiting what it may do with that data. This complements our Privacy Policy, which explains what we collect and why.

2. Current subprocessors

Anthropic

Generates post drafts from your writing profile and topic (Claude).

Data shared — Your writing profile (tone, sample posts, banned phrases), the topic you enter, and retrieved research context. Not linked to your name or email.

Exa

Semantic web search that sources the research cited in drafts.

Data shared — The search query derived from your topic. No account identifiers.

Stripe

Payment processing, subscriptions, and the billing portal.

Data shared — Email, name, billing address, and payment details. Card numbers go directly to Stripe and never reach our servers.

Resend

Transactional email — sign-in links, verification, password resets, contact form.

Data shared — Email address and message content.

Upstash

Redis used for API rate limiting and abuse prevention.

Data shared — A hashed identifier and request counts. No content.

Optional OAuth sign-in and, if you connect your account, importing profile details and publishing scheduled posts.

Data shared — Only if you connect LinkedIn: your profile identifier, headline, industry, current role, profile URL, and any post content you choose to publish.

3. Analytics we host ourselves

Umami, self-hosted on our own infrastructure. It is cookieless, records no cross-site identifiers, and no data leaves our servers.

4. Infrastructure

Application data is stored in a managed PostgreSQL database, and the application runs on our hosting provider's infrastructure. These providers process data only as needed to host the Service, under contract and with encryption in transit.

5. International transfers

Several providers above operate in the United States. Where personal data is transferred out of the UK or EEA we rely on appropriate safeguards — Standard Contractual Clauses, the UK International Data Transfer Addendum, or an adequacy decision. See the international transfers section of our Privacy Policy.

6. Changes to this list

We update this page when we add or remove a subprocessor. If you would like advance notice of changes, email hello@linkedinvoicebuilder.com and we will add you to the notification list.