Deal It List of Subprocessors

Purpose: AI-powered features including text generation, analysis, and vector embeddings

Data Processed: Trade documents, email content, user-generated text

Security Measures: Your data is processed according to OpenAI's Enterprise terms and is not used to train their models. Data is encrypted in transit and at rest.

Purpose: Email integration and synchronization (optional feature)

Data Processed: Email content, attachments, metadata (only when user explicitly connects Gmail account via OAuth)

Security Measures: OAuth 2.0 authentication, access only to data explicitly authorized by user. You can revoke access at any time through your Google Account settings.

Purpose: Cloud infrastructure hosting, database storage, file storage

Data Processed: All application data, user files, backups

Security Measures: Data stored in secure AWS data centers with encryption at rest and in transit. We use AWS services in Asia Pacific (Seoul) region primarily.

Purpose: Application performance monitoring, error tracking, and real user monitoring (RUM)

Data Processed: Application logs, performance metrics, user interactions, error data, session replays (with user input masked)

Security Measures: Data is transmitted securely and stored in Datadog's infrastructure. User input is masked by default for privacy protection.

Purpose: Product analytics and user behavior tracking (only with user consent)

Data Processed: User interaction events, feature usage patterns, session data

Security Measures: Data collection only occurs after explicit user consent. Users can opt-out at any time through cookie settings.