Subprocessors

Last updated: 2026-08-08

A subprocessor is a third party that processes personal data on our behalf when you use Nod. We use the minimum number of subprocessors required to deliver the product, and we publish the full list here so you can audit it.

We give 30 days' notice before adding a new subprocessor to this list. To subscribe to change notifications, email dmytro@hellonod.app.

Current subprocessors

Subprocessor Purpose Data shared Location Training on your data DPA / no-train basis
Supabase, Inc. Auth, Postgres database, Edge Functions, in-region text embeddings (gte-small) for cross-session search, first-party acquisition attribution and product analytics Email, OAuth identity, meeting transcripts, summaries, chat messages, transcript embeddings, extracted entities, usage logs, consented campaign touches, bounded app interaction events, random installation/session IDs, and account attribution AWS eu-west-1 (Ireland) No Supabase DPA
OpenRouter, Inc. LLM request routing + Whisper transcription (last-resort fallback) Audio chunks (transient), transcript text, chat messages, query text Routed via no-train providers No Zero Data Retention enabled; "may train on request data" routes disabled
Groq, Inc. Whisper (large-v3) speech-to-text — primary transcription provider Audio chunks (transient — one short WAV per utterance) USA (Google Cloud) No GroqCloud DPA; Services Agreement prohibits training on Inputs/Outputs; no retention by default (transient error/abuse logs ≤ 30 days; ZDR available)
OpenAI (via Azure OpenAI Service) Whisper speech-to-text (fallback) Audio chunks (transient, ~5 s windows) Routed by OpenRouter No Azure OpenAI no-train commitment
Anthropic PBC (via AWS Bedrock / Google Vertex AI) LLM summarisation & chat — primary (Claude Sonnet 4.6, Claude Haiku 4.5 fallback) Transcript text, system prompt, chat messages Routed by OpenRouter No Bedrock / Vertex AI no-train commitment
Google LLC (via Google Vertex AI) LLM summarisation — optional alternative model (Gemini) + a routing host for Claude Transcript text, system prompt Routed by OpenRouter No Vertex AI no-train commitment
Google LLC (OAuth) Authentication (sign-in with Google) Your Google email, OpenID profile claims Global No Google OAuth ToS
Apple, Inc. macOS app distribution & code signing Crash logs (if you opt-in via System Settings), receipt validation Global No Apple Developer Agreement
Paddle.com Market Limited Merchant of Record — subscription billing, payment processing, VAT/sales-tax remittance, invoicing, refunds Name, email, billing address and country, and payment-method details you enter at checkout; subscription and transaction records UK; global payment processing No Paddle DPA; Paddle acts as Merchant of Record
Vercel Inc. Hosting for the marketing website (hellonod.app) + cookieless Web Analytics Visitor IP (transient — used to derive aggregate page-view/event counts, never stored or exposed), user-agent, page path. No account or meeting data. USA (global edge) No Vercel DPA; Web Analytics is cookieless and does not track across sites
Google LLC (Analytics and Ads) Consent-gated website analytics, campaign attribution, and conversion measurement IP address, browser/device data, sanitised page and event details, Google Analytics client ID, and Google click/campaign identifiers. No meeting content or Nod account identity. Global No Google Ads Data Protection Terms; Google Controller-Controller Data Protection Terms where applicable

Audio is never stored by any subprocessor — it exists only for the duration of a single Whisper request and is discarded by the upstream provider as soon as the transcription completes.

Nod never receives or stores your full card details — those are handled entirely by Paddle as Merchant of Record.

What we do not use

  • No third-party analytics SDKs in the app. The macOS app embeds no third-party telemetry SDK — no PostHog, Mixpanel, Amplitude, Segment, Google Analytics, or Sentry. The marketing website uses consent-gated Vercel Web Analytics, Google Analytics, and Google Ads measurement. They never receive meeting content or Nod account identity.
  • No third-party fonts or icon CDNs. The website self-hosts its fonts and app icons, so loading a page sends no request — and no visitor IP — to Google Fonts, gstatic, or any other CDN.
  • No in-product advertising or data sale. Nod shows no ads and does not sell personal data. Google Ads receives measurement data only after website analytics consent.
  • No meeting-platform bots. We do not deploy a bot into Zoom, Meet, or Teams — Nod captures audio locally via macOS APIs only.
  • Granola is not a subprocessor. Nod's "Import from Granola" feature reads Granola's local cache file on your Mac to bring your own transcripts in. No data is sent to Granola, and Granola never processes data on our behalf.
  • Hugging Face is not a subprocessor. Nod downloads its on-device speaker model from a public Hugging Face repository the first time it separates speakers, then caches it on disk. The download discloses your IP and app version, as any download does; no audio, transcript, or account data is sent, and Hugging Face processes nothing on our behalf.
  • Official connector clients are user-selected recipients. When you authorize ChatGPT or Claude, Nod sends the meeting data you request directly to that client under a read-only OAuth grant. OpenAI or Anthropic processes that data under its own relationship with you, not on Nod's behalf, so this connector use does not make either company a Nod subprocessor.

How data flows

You ──► Nod (your Mac) ──► Supabase Edge Function (llm-proxy) ──┬─► Groq ──► Whisper (speech-to-text, primary)
                          │                                     ├─► OpenRouter ──► Claude (summaries + chat) + Whisper (last-resort)
                          │                                     └─► OpenAI ──► Whisper (fallback)
                          │
                          └─► Supabase Postgres (transcripts, summaries, usage logs)

No provider API key ever touches your Mac. The app sends requests to our own Edge Function authenticated with your Supabase JWT; the Edge Function attaches the provider key (stored only in Supabase secrets) and forwards the call. Speech-to-text goes to Groq first, with OpenAI and OpenRouter as fallbacks; chat and summaries go through OpenRouter. Audio bytes are forwarded once and never written to durable storage anywhere in this chain.

Change history

Date Change
2026-05-27 Initial published list.
2026-06-02 Added cross-session search; noted chat messages, embeddings, and extracted entities stored in Supabase.
2026-06-03 Embeddings are generated in-region by Supabase's built-in gte-small model (inside the Edge Function), not sent to any external embedding provider.
2026-06-10 Added Paddle.com Market Limited as an active subprocessor and Merchant of Record for subscription billing.
2026-06-23 Added Vercel Inc. (marketing-site hosting + cookieless Web Analytics). Self-hosted website fonts and app icons to stop IP leakage to Google CDNs.
2026-06-24 Added Groq, Inc. as the primary Whisper speech-to-text provider (audio transient, no retention by default). OpenAI/OpenRouter Whisper are now fallbacks.
2026-06-25 LLM summaries & chat now default to Anthropic Claude (Sonnet 4.6, Haiku 4.5 fallback), routed via AWS Bedrock / Google Vertex AI (no-train). Google Gemini becomes an optional model rather than the default. No change to data shared or retention.
2026-07-30 Speaker separation moved to an on-device Core ML model fetched once from a public Hugging Face repository. Noted as an outbound download, not a subprocessor — no audio, transcript, or account data is sent.
2026-08-06 Documented official ChatGPT and Claude connectors as user-authorized recipients, with read-only OAuth access rather than subprocessors acting for Nod.
2026-08-07 Added consent-gated Google Analytics and Google Ads measurement, plus first-party campaign-to-account attribution in Supabase.
2026-08-08 Documented bounded first-party macOS/iOS product interaction events stored in Supabase; no app analytics SDK or Google app telemetry was added.

Questions? dmytro@hellonod.app.