Last updated: 2026-08-22.
NowDo.AI uses a small set of third-party sub-processors to run the Service. Each one handles only the data it needs for its job. This page is the maintained source of truth. We update it before a new sub-processor goes live. For the wider picture of what we collect and your rights, see the Privacy Policy.
Every sub-processor below is essential to running the Service. We use no non-essential trackers or advertising sub-processors.
Supabase
- Purpose: authentication, database and file storage. This is where your account and your data live.
- Data: your email, password hash, tasks, memos, chat threads, settings and every other stored record.
- Region: United States.
Anthropic
- Purpose: the AI model provider behind chat, row enrichment and brain-dump capture.
- Data: the prompt and surrounding context you send when you use an AI feature. Anthropic does not train its models on this content.
- Region: United States.
Vercel
- Purpose: web hosting for the site and app shell.
- Data: request metadata inherent to serving a page (IP address, timestamp, user agent).
- Region: United States, with a global edge network.
Cloudflare
- Purpose: content delivery and network protection in front of the site.
- Data: request metadata inherent to serving a page (IP address, timestamp, user agent).
- Region: global edge network.
Sentry
- Purpose: error monitoring, so we can fix crashes.
- Data: stack trace, URL path without query string, app version, browser and OS, and your account user-id. We strip emails, tokens, and row, memo and chat content before the report is sent.
- Region: United States.
Plausible
- Purpose: a cookieless page-count on the public pages only. It never runs inside the signed-in app.
- Data: the page path, the coarse referrer and any campaign parameters in the link you followed (
utm_source, utm_medium, utm_campaign), for a public-page visit. It sets no cookies and stores no personal data, and none of it is written to your account.
- Region: European Union.
Paddle
- Purpose: payments for the Pro plan. Paddle is the merchant of record, so Paddle sells the subscription to you, takes the payment and handles the tax.
- Data: your email address, billing country and the payment details you enter at checkout. Card numbers are entered directly with Paddle and never reach us. We store only your Paddle customer and subscription identifiers, and your plan status.
- Region: United States and the United Kingdom.
RevenueCat
- Purpose: validating Pro subscriptions bought inside the iPhone app, and telling us when one renews or ends. Apple takes the payment; RevenueCat checks the receipt with Apple and reports the result to us.
- Data: your account identifier, the subscription's status and dates, and the country of your App Store account. No payment details: those stay between you and Apple.
- Region: United States.
Resend
- Purpose: transactional email (welcome, password reset, the morning digest) and newsletter delivery if you opt in to project updates.
- Data: the recipient email address and the message body. The newsletter audience list is stored with engagement metadata (opens, clicks).
- Region: United States.
Your data is stored in the United States. Where you are in the EU or UK, transfers to the United States rely on the Standard Contractual Clauses in our agreements with the relevant sub-processors. Business users can request a Data Processing Agreement at contact@cortiq.so.