This page lists the third parties that Neivan Technology Holdings, LLC ("Neivan") uses to process personal data when providing the Synapse platform and our website (the "Service"). It supplements our Privacy Policy and the Data Processing Agreement ("DPA"). Where the DPA and this page address the same processing, the DPA controls.
| Subprocessor | What it does for us | Data it processes | Location |
|---|---|---|---|
| DigitalOcean | Hosts the platform, the website and our internal tools (App Platform), and runs the job queue and cache (Managed Valkey) | All data processed by the Service, in transit and while jobs run | United States (New York) |
| Supabase | Database, sign-in and file storage for customer accounts and content | Account data and all customer content stored in the Service | United States (AWS us-east-1) |
| Anthropic | AI model provider for Neivan-managed AI features, including agent web search | Prompts, instructions and the content an AI feature needs for the request | United States |
| OpenAI | AI model provider for Neivan-managed AI features, text embeddings for search, and audio transcription | Prompts, content to embed or transcribe, and the content an AI feature needs for the request | United States |
| Resend | Sends account and service email (for example, sign-in and verification messages) | Recipient name and email address, message content and delivery metadata | United States |
| Stripe | Payment processing and billing | Billing contact, payment metadata (card brand, last four digits, Stripe references) and transaction records. Full card numbers are handled by Stripe and never stored by Neivan | United States |
| Sentry | Error monitoring for the platform | Error messages, stack traces, browser and device details, and any account identifiers included with an error | United States |
| Cloudflare | DNS, TLS, content delivery and bot protection for our domains, and routing of email sent to our addresses | Request metadata such as IP address and browser details; email sent to Neivan addresses | Global network |
We do not use product-analytics or advertising providers.
Neivan-managed AI features use Anthropic and OpenAI only.
The platform also lets a customer connect its own API key for other AI or search providers — for example Google (Gemini), Mistral, DeepSeek, xAI, Perplexity, Brave, Tavily or Serper. When a customer does that, requests made with that key go to that provider under the customer's own account and terms with it. Those providers are chosen by the customer and are not Neivan's subprocessors for that customer.
Content sent to AI providers through their APIs is not used to train their models under the providers' API terms, and Neivan does not use customer content to train any model.
When a customer connects an app — such as Google Workspace, YouTube, Microsoft 365, Slack, HubSpot, Zoho, Facebook or Instagram — the platform reads from and acts in that app as the customer directs. Those apps are the customer's own services, governed by the customer's agreements with them (for YouTube, the YouTube Terms of Service); they are not Neivan's subprocessors. How we handle data from Google services, including YouTube, is described in Section 6 of our Privacy Policy.
Before we add or replace a subprocessor that will process customer personal data, we will:
If we must replace a subprocessor sooner to protect the security or continuity of the Service, we will notify customers as soon as we reasonably can.
A customer may object to a new subprocessor on reasonable data-protection grounds by writing to [email protected] within the 30-day notice period. We will work with the customer in good faith to address the concern. If we cannot, the customer may terminate the affected part of the Service without penalty, as described in the DPA.
Questions about this list: [email protected].