Last Updated: May 13, 2026
A "subprocessor" is a company that processes data on behalf of Grizzilla, Inc. ("Quilt") to operate the Service. We use the following subprocessors. We update this page when we add or remove a subprocessor; material additions are also communicated through our Privacy Policy.
| Provider | Purpose | Data Processed | Location |
|---|---|---|---|
| Supabase, Inc. | Account authentication, session management, cloud database for metadata and Personal Inventory | Account credentials (hashed), message metadata, Personal Inventory, AI usage records, MCP audit logs | United States (AWS) |
| Anthropic, PBC | Default AI inference for in-app AI features | AI prompts and context you submit to AI features (transient processing; not retained by Anthropic for training per Anthropic's API Terms of Service) | United States |
| Stripe, Inc. | Subscription billing, payment processing, tax calculation | Tokenized payment information, billing email, transaction records (full card numbers are not transmitted to Quilt) | United States |
| Resend, Inc. | Transactional email delivery (account notices, billing receipts, password resets) | Recipient email address, message body of transactional emails sent by Quilt | United States |
| Railway Corporation | Application hosting and infrastructure | All server-side data in transit and at rest | United States |
| Apple, Inc. | iOS and macOS application distribution; Sign in with Apple authentication | App download metadata; Apple ID identifier when SIWA is used | United States |
| Google LLC | Android application distribution; Sign in with Google authentication | App download metadata; Google account identifier when Continue with Google is used | United States |
| Microsoft Corporation | Windows application distribution; Continue with Microsoft authentication | App download metadata; Microsoft account identifier when Continue with Microsoft is used | United States |
When you authorize a connected account (Gmail, Microsoft 365 Outlook, Slack, Yahoo Mail, Meta WhatsApp Business, Meta Messenger, LinkedIn, Apple iMessage via the Quilt Relay App, SMS via the Quilt Mobile App), you authorize us to access that account through its official API solely to operate the Service. These providers are not "subprocessors" of Quilt in the legal sense — they are your service providers — but data flows between Quilt and the providers you connect.
| Provider | Purpose | What We Access |
|---|---|---|
| Google LLC (Gmail) | Email sync and send | Message metadata, message body on demand, contacts (when authorized), calendar events |
| Microsoft Corporation (Outlook) | Email sync and send | Message metadata, message body on demand, contacts (when authorized), calendar events |
| Slack Technologies, LLC | Slack message sync | Channel and DM metadata, message body on demand, workspace member list |
| Yahoo Inc. | Email sync and send | Message metadata, message body on demand |
| Meta Platforms, Inc. | WhatsApp Business, Messenger, Instagram messaging | Message metadata, message body on demand (subject to provider approval) |
| LinkedIn Corporation | Profile data and (where API permits) messaging | Profile fields, connections, message metadata where the LinkedIn API supports it |
| Apple iMessage (via Quilt Relay App) | iMessage sync | Local chat.db on a Mac running the Quilt Relay App; relayed metadata only |
If you connect your own API key to Anthropic, OpenAI, or Google for in-app AI features, those calls are made directly from your device or our infrastructure to the provider you chose using your credentials. The provider's terms apply to that exchange; we do not store the contents of those exchanges on our servers.
Before engaging a new subprocessor, we:
We update this page when subprocessors change. Notice of material additions or substitutions is also given through our Privacy Policy.
If you have questions about our subprocessors, contact us at hello@joinquilt.app.