Last updated: September 9, 2026
These are the companies that process data on our behalf to make Botto work. Each one maps to a category in section ix of our privacy notice, receives only the minimum it needs, and operates under terms that prohibit using your data for its own purposes.
| Company | What they do for us | What they receive | Location |
|---|---|---|---|
| Supabase (Supabase Inc.) | Database, authentication, backend hosting | Email, password hash, cellar data, preferences | United States |
| Apple (Apple Inc.) | Sign in with Apple; push notification delivery | Sign-in token + name/email on first sign-in; push tokens and notification payloads | United States |
| Anthropic (Anthropic PBC) | AI label reading (with your consent) | Label photo during analysis + extracted text; not used for model training, deleted after their short abuse-monitoring window | United States |
| Cohere (Cohere Inc.) | AI label recognition (with your consent) | Label photo during analysis + the numerical label signature; not used for model training | Canada / United States |
| PostHog (PostHog Inc.) | Product analytics | Allowlisted usage events, user ID | United States |
| Sentry (Functional Software Inc.) | Crash reporting | Scrubbed crash reports (no email, IP, or label text), device metadata | United States |
| RevenueCat (RevenueCat Inc.) | Subscription billing & receipt validation | RC user ID, subscription status, purchase receipts | United States |
| Expo (650 Industries Inc.) | Push notification routing, app updates | Push token; device requests for app update bundles | United States |
| SMTP2GO | Transactional email | Your email address | New Zealand / US infrastructure |
| Cloudflare (Cloudflare Inc.) | Website hosting and CDN for getbotto.com | Standard web request data (IP, user agent) in transit | United States (global network) |
| Vercel (Vercel Inc.) | Hosts our internal administration tools | Server logs from our own operators’ use of those tools | United States |
When we add, remove, or change a subprocessor in a way that affects what data it receives, we update this page and treat it as a material change under our privacy notice — active accounts get an email before it takes effect.
Questions: [email protected]