Roz is built to keep your content on your Mac. The small set of providers below support the parts of Roz that need our servers — your account, billing, and, on hosted plans, the AI features you choose to use. Each processes only the categories of data noted, under a data-processing agreement (DPA) with Bearking LLC.
Nothing here receives your local vault or the sources Roz reads on your device — we don’t have them.
Current subprocessors
| Provider | Purpose | Data it handles |
|---|---|---|
| Stripe | Payments | Card details (submitted directly to Stripe), billing address, transaction records |
| WorkOS | Authentication | Name, email, login events |
| Neon | Database (our account & billing data) | Account, subscription, and billing records |
| Render | Application hosting (API + relay) | Data in transit for the hosted features you use |
| Cloudflare | DNS, CDN, security, downloads | IP addresses, request metadata |
| Postmark | Transactional email (receipts, security) | Name, email, and the message content we send you |
| Anthropic | AI model provider (hosted plans; optional for BYOK) | Prompt content for AI features on Base / Pro |
| OpenAI | AI model provider (hosted plans; optional for BYOK) | Prompt content for AI features on Base / Pro |
| Fathom Analytics | Privacy-respecting website analytics | Aggregate, cookieless site usage — no advertising profiles, no cross-site tracking |
How AI providers fit in
On Base and Pro, the specific prompt content a feature needs is sent through our relay to an AI provider (Anthropic and/or OpenAI). Our relay does not store the bodies of your prompts. The AI provider processes that content to generate a response and may retain it transiently under its own terms (for example, a limited abuse-monitoring window). We configure our provider accounts to prohibit using your content to train their models where that setting is available, and we do not use your content to train our own models.
On BYOK (“bring your own key”), Roz talks to the provider you chose using your key, directly from your Mac — that traffic does not pass through our servers, and your agreement with that provider governs it.
On Free (on-device), the model runs locally on your Mac and no prompt content leaves your device.
Changes
We’ll keep this list current and update it before adding a subprocessor that materially changes how your data is handled. Questions? Email privacy@roselyn.ai.