Legal
Subprocessors
Last updated September 17, 2026
Infrastructure and operations
| Provider | What it does for us | Data involved | Where |
|---|---|---|---|
| Vercel | Hosting, content delivery, edge middleware, and traffic analytics | Request data (IP, user agent, URL), server logs | United States, with a global edge network |
| Managed Postgres provider | The application database — accounts, saved content, runs, credit ledger | All stored account data | United States |
| Stripe | Payment processing, subscriptions, invoicing, fraud prevention | Email, payment details (collected by Stripe directly), transaction history | United States and globally |
| Google Analytics | Website usage analytics (loaded only with consent) | Pseudonymous usage events, anonymised IP | United States |
| PostHog | Product analytics (loaded only with consent) | Pseudonymous usage events | United States (US cloud) |
AI model providers
These receive prompt content only when you choose to run a prompt on one of their models — the prompt, your filled-in values, and any context you attach. Nothing is sent to a provider you have not selected, and nothing is sent at all if you only browse or save prompts.
Each processes that data under its own terms. We do not control their retention or training practices, which is why the Privacy Policy asks you not to put data in a prompt that you are not allowed to disclose to a third party.
If you bring your own API key, the run goes to that provider under your own account and your own agreement with them — we only relay it.
Changes to this list
We update this page when we add or replace a subprocessor. If you hold an account and want to be told in advance, email daiki@iterprompt.com with "Subprocessor notifications" in the subject and we will add you to the notice list.
Data processing agreements
If you need a data processing agreement (DPA) for your own compliance, email daiki@iterprompt.com and we will arrange one. For transfers out of the EEA, the UK or Switzerland we rely on the Standard Contractual Clauses, as described in the Privacy Policy.