A "sub-processor" is a third-party company that processes personal data on our behalf to help us provide APEX, operated by AAA Designs LLC. Each sub-processor below processes data only to deliver the Service to you, under its own terms and privacy policy. Where a sub-processor offers a data processing agreement (DPA), we seek to put one in place; some providers listed are free or public APIs that do not offer a DPA and receive only the minimal data needed to perform your request. We do not sell your data. Our AI model providers (OpenAI, Anthropic, Google) do not use your content to train their models under our API terms. The connected-account and search providers below process your data only to carry out the specific action or search you ask APEX to perform.
| Sub-processor | Purpose | Data it may process | Primary location |
|---|---|---|---|
| OpenAI | AI language model + OCR (text extraction) for assistant responses and document reading | Prompts and content you ask APEX to act on (e.g., email/calendar text, documents, notes) | United States |
| Anthropic | AI language model (Claude) for assistant reasoning and responses | Prompts and content you ask APEX to act on | United States |
| ElevenLabs | Text-to-speech (the assistant's voice) | The text APEX speaks aloud to you | United States |
| Supabase | Database and authentication (accounts, sessions, your saved goals/tasks/memory) | Account info, session data, and your stored APEX data | United States |
| Render | Application hosting and infrastructure | All data processed in transit by the running service | United States |
| Lemon Squeezy | Subscription payments and billing as our Merchant of Record (seller of record), including sales-tax/VAT handling (only when you subscribe to a paid plan) | Billing name, email and address, country/region for tax, and payment-card details (collected by Lemon Squeezy; APEX does not receive the full card number) | United States |
| Connected-account features you authorize (Gmail, Calendar) and supporting Google APIs used to fulfill your requests (Vision for document text extraction; Maps & Places for location lookups; Natural Language; Analytics) | Only the Google data needed for the features you turn on, with your permission | United States | |
| Slack | Posting messages and notifications to your Slack workspace (only when you connect Slack) | The message content you have APEX send | United States |
| Zoho | CRM features (only when you connect Zoho) | The records you read or update | United States |
| Ayrshare | Publishing posts to your connected social accounts (only when you publish) | The post text and media you publish | United States |
| Cloudflare | Content delivery network and security proxy that sits in front of the Service | Network traffic in transit (IP address, request metadata) as it passes through the edge | United States |
| Telegram | Push notifications and two-way approvals to your phone (only when you connect Telegram) | The notification content APEX sends and your Telegram chat identifier | United Kingdom / UAE |
| Resend | Transactional system email (e.g., password reset) | Your email address and the system message content | United States |
| Brevo | Marketing email/SMS list — product updates and messages you opt in to receive (only when you join a list or opt in) | Your email address and, if you provide it, your phone number | France (EU) |
| Expo | Push notifications to the APEX mobile app (only when you enable notifications) | Your device push token and the notification content APEX sends | United States |
When you use the prospecting/finder feature, your search queries are processed through whichever web-search provider is configured for your workspace: Tavily, Brave Search, SerpApi, or Apify. These providers receive only your search query to return results.
Market, financial, weather, real-estate, and location features send only the non-identifying query needed (such as a ticker symbol, city, or search area — never your account identity) to the relevant data provider to return results: CoinGecko and Coinbase (crypto prices), Twelve Data (stock quotes), FRED / U.S. Federal Reserve (interest & economic rates), Open-Meteo (weather), OpenStreetMap (business & place lookups), and real-estate listing sources (RentCast, SimplyRETS).
If we add or change a sub-processor in a way that affects how your data is processed, we will update this page. Questions: support@apexcommand.app.