Legal

Subprocessors

Last updated August 31, 2026

These providers process customer data on our instructions when you use LabhDo:

Vercel — hosts the web app and may process request logs / optional Analytics.
Railway — hosts the API and PostgreSQL database.
Cloudflare — R2 object storage for photos, audio, and documents (signed URL access).
Google — OAuth identity (email, name, avatar) when you choose Continue with Google. We do not load Google Fonts from Google in the product; fonts are self-hosted.
Apple — Sign in with Apple (including Hide My Email) when configured.
Microsoft — OAuth identity when you choose Continue with Microsoft.
OpenAI (or a configured OpenAI-compatible host) — vision and transcription when cloud AI is on.
Stripe — payments, invoices, and tax calculation. Card data stays with Stripe.
Resend or Postmark — transactional email (invites, magic links, deletion, export) when configured.
Plausible — cookieless privacy-friendly analytics (page views and product events). No advertising identifier.
Sentry — error monitoring, if a DSN is configured, with PII scrubbing.

A local AI worker (Ollama / Whisper on a machine you run) processes media only if you attach one. That machine is under your control, not ours.

These pages are written to match the product as shipped. They are not a substitute for advice from your own counsel. Request a review before you rely on them as a filed contract or DPA.