Subprocessors

Updated: August 28, 2026

YouSpot is built on a small number of third-party services. This page lists every one that processes user data — what it does for you, and what data it touches — so you don't have to guess what's behind the product. We keep it current: when we add or drop a provider, this page changes with it.

AI providers

These services generate answers, embeddings, memory, and enrichment. We use them through their commercial APIs under terms that do not permit training their models on your data.

ProviderWhat it doesData it touches
AnthropicClaude models answer chat questions and run cloud agents.Chat messages, attached files, and the graph context sent with a request.
OpenAIOptional GPT chat models, and the vector embeddings behind semantic search.Chat content when a GPT model is selected; the text of searchable objects (notes, posts, links, files, emails) for embeddings.
OpenRouterAPI gateway that routes some model choices to their hosts (OpenAI, Anthropic).Chat content for conversations using those models.
Mem0Long-term chat memory — distills durable facts from conversations so the assistant remembers you.Chat messages, and the extracted memory facts.
FiberLinkedIn and company enrichment: profile and post syncing, company research, and telling people apart from bulk mailers.LinkedIn profile URLs, company domains, and email addresses submitted for lookup.

Infrastructure and operations

ProviderWhat it doesData it touches
SupabaseDatabase and file storage.All account data and the contents of your Second Brain, including uploaded files.
DigitalOceanApplication hosting — the servers YouSpot runs on.All data processed by the application in the course of serving you.
ClerkSign-in and account authentication.Email address, name, and authentication credentials.
StripePayments and subscriptions. Card details go directly to Stripe; we never see them.Email address, payment method, and billing history.
ResendSends the email YouSpot sends you, and receives mail addressed to your YouSpot inbox.Email addresses and the contents of those messages.
SentryError monitoring, so we find out when something breaks.Technical error context, which can include account identifiers.
MixpanelProduct analytics — which features get used, so we know what to improve.Usage events tied to your account identifier; not the contents of your data.

Connected services you control

Separately from the subprocessors above, you can connect your own accounts as data sources: Google (Gmail and Calendar), LinkedIn, X, and HubSpot. These aren't subprocessors — they're services you already use, and YouSpot accesses them only under the OAuth grant you approve, which you can revoke at any time from your integrations page. What we access from each and how long we keep it is covered in the privacy policy.

Questions

If you need more detail for a security or procurement review — or a data processing agreement — email privacy@youspot.com.