Data Processors

Last updated: April 21, 2026 · Back to Privacy Policy

This is a complete list of third-party services that process your data on Amplify's behalf. Each vendor's role, the data they receive, and their retention policy is listed below. When we add a new processor or a vendor materially changes their policy, we update this page and — for material changes — notify you by email.

We do not sell your data. Our vendors are contractually prohibited from using your data to train their AI models.

VendorWhat they doData sharedRetention
Supabase
Supabase, Inc.
Privacy policy →
Database, authentication, real-time servicesAll your Amplify account data (goals, projects, tasks, events, habits, AI conversations, preferences)Until you delete your account
Vercel
Vercel Inc.
Privacy policy →
Application hosting and serverless function executionHTTP request logs (no account content)30 days for logs
Stripe
Stripe, Inc.
Privacy policy →
Payment processing and subscription managementName, email, billing address, card details (collected directly by Stripe — never touches our servers)Per Stripe's retention policy
Google Gemini
Google LLC
Privacy policy →
AI text and voice reasoningYour AI messages, relevant account context (goals, projects, upcoming events)Per Google's API terms. Not used for training on paid tiers.
Anthropic Claude
Anthropic PBC
Privacy policy →
Complex planning and multi-step AI reasoningYour AI messages, relevant account context30 days default for abuse monitoring. Not used for training.
Deepgram
Deepgram, Inc.
Privacy policy →
Voice speech-to-text transcription and text-to-speech synthesisVoice audio, text responsesZero retention on the service tier we use
Google Calendar
Google LLC
Privacy policy →
Two-way calendar synchronization (opt-in)Calendar events you explicitly authorizeWhile the integration remains connected
Resend
Resend, Inc.
Privacy policy →
Transactional email delivery (receipts, password resets, security alerts)Your email address, message contentPer Resend's retention policy