Subprocessors
Last updated 2 November 2026.
When you ask AirBubble something, your request passes through a small number of outside services on its way to an answer. This page lists each one, what it does, what it sees, and where it runs.
Standby services are used only while the main service is down.
How to read this
Three things to know before the table makes sense. A vendor is on this list because something of yours passes through it. If nothing of yours reaches a company, it is not listed.
A row means your data goes there
Your screen and your voice go out only when you use the talk or select keys (fn + Control or fn + Shift on a Mac, Ctrl + Win or Shift + Win on Windows), Command + Option + A on a Mac or the dictation keys, when you type a question in the notch on a Mac or the panel on Windows or tap Speak there, or during a voice conversation, walkthrough, agent task or Notetaker session you start. Each service gets only the part it needs.
Standby only during an outage
OpenAI and ElevenLabs get nothing unless the service they stand in for is down.
You hear about changes first
A new service is posted here at least 30 days before it starts.
Every service, and what each one sees.
Each row gives the job, the part of your data that reaches it, where that service runs and what it keeps.
| Service | Vendor | What reaches it | Where it runs | What it keeps |
|---|---|---|---|---|
| Writes Bubble’s answers, lessons, walkthrough steps and spoken lines, tidies dictation and Notetaker transcripts, plans agent tasks, and runs screen control. | Anthropic | Your words as text; a screenshot and the names of the controls in the front window when you ask; during a walkthrough you start, your goal, the app’s name and web address, the names of its controls, where your pointer is and the steps so far, with a screenshot only when a control cannot be found by its name; earlier turns of the conversation; text from your knowledge files; a Notetaker transcript when a recording stops, to write its summary, and again when you update the summary, each new line as it comes while Transcript correction is on, and what has been said so far if you turn on Live cues; when you ask about a Notetaker session, its transcript, its summary and the Thoughts you typed; for an agent task, the task and the names of the controls in the front window; with screen control on, a screenshot of the display after each step; for dictation clean-up, the dictated text, your dictionary of names and words and the text around the cursor, plus up to 12 short pieces of text from the front window, the app’s name and its web address while Screen-aware drafting is on; for Edit Mode, the selected text; web searches the model writes. | The United States | Deletes it within 30 days, or keeps it up to 2 years if it flags a breach of its usage rules, under its commercial terms.Never uses it to train its models. |
| Speaks Bubble’s replies in the AirBubble voice. Turns your speech into text live during a voice conversation in English, and transcribes whenever the main transcription service is down. | Cartesia | The text of each reply, with its language; your speech during a voice conversation in English, streamed straight from your computer on a short-lived key we issue, together with your dictionary of names and words, names included; recorded speech only while the main transcription service is down. | The United States | Keeps it with no set period, and deletes it when we ask.Our opt-out from its use of our content for training is confirmed. |
| Runs our servers in Frankfurt, which every request from the app passes through, and hosts this website. | Vercel | Everything the app sends, in transit, with the network address it came from; the pages you open here. | The European Union (Frankfurt)This website is also served from Vercel’s locations near you. | A record of each request, with its network address, for 1 day. Never what was in it. |
| Passes recorded speech to our transcription service, and your words and the names of the controls on your screen to TypeSafe, each under zero data retention. | Vercel AI Gateway | Recorded speech with a language hint; your words, the app’s name, and the names, kinds and positions of the controls in the front window. | Vercel’s regions around the world | None of the content. It records each call’s model, size and cost. |
| Turns what you say into text for Talk, Dictation and the Notetaker. | SpaceXAI | Recorded speech with a language hint. | The United States | Nothing. Zero data retention, which we check on every reply.Keeps nothing to train on. |
| Works out which control on your screen you meant and whether it is still there. | TypeSafe | Your words, the app’s name, and the names, kinds and positions of the controls in the front window. Never a picture of your screen. | The United States | Nothing. Zero data retention, which we check on every reply. |
| Holds our database, with accounts, plans, usage records and the waitlist, and runs the sign-in service, which keeps your account, your sign-in sessions and the one-time codes it emails. | Neon | Your email address, held by the sign-in service, while our own tables keep only a keyed fingerprint of it; the one-time code it emails you, if you sign in with email; your name and picture from Google, if you continue with Google; sign-in times; your plan; usage records; waitlist addresses. Never what you said or showed. Your profile and the settings you keep with your account. | The European Union (Frankfurt) | What we store, for as long as the privacy policy says, and a restore history of 7 days. |
| Emails you a one-time code each time you sign in with email, and messages about your account and plan. | Resend | Your email address, and the one-time code or the message. | The United States | Each email, with your address and the message, for 30 days. |
| Stores our request log and checks that the service is up. | Better Stack | One line per request: fingerprints of your account and network address, the path, the result, the timing, which service answered and the type of any error. Never content. The network address, browser details, referrer, connection fingerprints and query string our host adds are dropped as they arrive, before anything is stored. | The United States | Kept 3 days. |
| Standby, used only during an outage | ||||
| Answers in Anthropic’s place, only while Anthropic is down. Never used for screen control or for speech. | OpenAIStands in for Anthropic | The same request Anthropic would have received, screenshot included. | The United States | Keeps it up to 30 days to check for abuse, and we ask it not to store responses.Never uses it to train its models. |
| Speaks Bubble’s replies, only while Cartesia is down. | ElevenLabsStands in for Cartesia | The text of each reply, with its language. | The United States | Keeps each reply’s text and audio until we delete it, then up to 30 days in its backups.Its option to use our content for training is switched off. |
| Companies that act on their own account | ||||
| Confirms who you are when you continue with Google, under your Google account’s own terms. | That you are signing in to AirBubble. It tells the sign-in service your email address, name and picture. | Under its own terms | Under its own privacy policy. | |
| Sells paid plans as our reseller and merchant of record, and handles payment, tax, receipts and refunds. Paddle.com Inc. sells to buyers in the United States, Paddle.com (Canada) Ltd to buyers in Canada, and Paddle.com Market Limited, of the United Kingdom, to buyers everywhere else. | Paddle | Your email address, country and the billing details its checkout asks for, the plan you chose, and the network address of the checkout. Card details go straight to Paddle, never through us. | The United Kingdom and the United StatesThe United States for buyers there | Payment records as the seller, as tax law requires, under its own privacy notice. |
Anthropic
Writes Bubble’s answers, lessons, walkthrough steps and spoken lines, tidies dictation and Notetaker transcripts, plans agent tasks, and runs screen control.
- What reaches it
- Your words as text; a screenshot and the names of the controls in the front window when you ask; during a walkthrough you start, your goal, the app’s name and web address, the names of its controls, where your pointer is and the steps so far, with a screenshot only when a control cannot be found by its name; earlier turns of the conversation; text from your knowledge files; a Notetaker transcript when a recording stops, to write its summary, and again when you update the summary, each new line as it comes while Transcript correction is on, and what has been said so far if you turn on Live cues; when you ask about a Notetaker session, its transcript, its summary and the Thoughts you typed; for an agent task, the task and the names of the controls in the front window; with screen control on, a screenshot of the display after each step; for dictation clean-up, the dictated text, your dictionary of names and words and the text around the cursor, plus up to 12 short pieces of text from the front window, the app’s name and its web address while Screen-aware drafting is on; for Edit Mode, the selected text; web searches the model writes.
- Where it runs
- The United States
- What it keeps
- Deletes it within 30 days, or keeps it up to 2 years if it flags a breach of its usage rules, under its commercial terms.Never uses it to train its models.
Cartesia
Speaks Bubble’s replies in the AirBubble voice. Turns your speech into text live during a voice conversation in English, and transcribes whenever the main transcription service is down.
- What reaches it
- The text of each reply, with its language; your speech during a voice conversation in English, streamed straight from your computer on a short-lived key we issue, together with your dictionary of names and words, names included; recorded speech only while the main transcription service is down.
- Where it runs
- The United States
- What it keeps
- Keeps it with no set period, and deletes it when we ask.Our opt-out from its use of our content for training is confirmed.
Vercel
Runs our servers in Frankfurt, which every request from the app passes through, and hosts this website.
- What reaches it
- Everything the app sends, in transit, with the network address it came from; the pages you open here.
- Where it runs
- The European Union (Frankfurt)This website is also served from Vercel’s locations near you.
- What it keeps
- A record of each request, with its network address, for 1 day. Never what was in it.
Vercel AI Gateway
Passes recorded speech to our transcription service, and your words and the names of the controls on your screen to TypeSafe, each under zero data retention.
- What reaches it
- Recorded speech with a language hint; your words, the app’s name, and the names, kinds and positions of the controls in the front window.
- Where it runs
- Vercel’s regions around the world
- What it keeps
- None of the content. It records each call’s model, size and cost.
SpaceXAI
Turns what you say into text for Talk, Dictation and the Notetaker.
- What reaches it
- Recorded speech with a language hint.
- Where it runs
- The United States
- What it keeps
- Nothing. Zero data retention, which we check on every reply.Keeps nothing to train on.
TypeSafe
Works out which control on your screen you meant and whether it is still there.
- What reaches it
- Your words, the app’s name, and the names, kinds and positions of the controls in the front window. Never a picture of your screen.
- Where it runs
- The United States
- What it keeps
- Nothing. Zero data retention, which we check on every reply.
Neon
Holds our database, with accounts, plans, usage records and the waitlist, and runs the sign-in service, which keeps your account, your sign-in sessions and the one-time codes it emails.
- What reaches it
- Your email address, held by the sign-in service, while our own tables keep only a keyed fingerprint of it; the one-time code it emails you, if you sign in with email; your name and picture from Google, if you continue with Google; sign-in times; your plan; usage records; waitlist addresses. Never what you said or showed. Your profile and the settings you keep with your account.
- Where it runs
- The European Union (Frankfurt)
- What it keeps
- What we store, for as long as the privacy policy says, and a restore history of 7 days.
Resend
Emails you a one-time code each time you sign in with email, and messages about your account and plan.
- What reaches it
- Your email address, and the one-time code or the message.
- Where it runs
- The United States
- What it keeps
- Each email, with your address and the message, for 30 days.
Better Stack
Stores our request log and checks that the service is up.
- What reaches it
- One line per request: fingerprints of your account and network address, the path, the result, the timing, which service answered and the type of any error. Never content. The network address, browser details, referrer, connection fingerprints and query string our host adds are dropped as they arrive, before anything is stored.
- Where it runs
- The United States
- What it keeps
- Kept 3 days.
Standby, used only during an outage
OpenAI
Answers in Anthropic’s place, only while Anthropic is down. Never used for screen control or for speech.
- Standby
- Stands in for Anthropic
- What reaches it
- The same request Anthropic would have received, screenshot included.
- Where it runs
- The United States
- What it keeps
- Keeps it up to 30 days to check for abuse, and we ask it not to store responses.Never uses it to train its models.
ElevenLabs
Speaks Bubble’s replies, only while Cartesia is down.
- Standby
- Stands in for Cartesia
- What reaches it
- The text of each reply, with its language.
- Where it runs
- The United States
- What it keeps
- Keeps each reply’s text and audio until we delete it, then up to 30 days in its backups.Its option to use our content for training is switched off.
Companies that act on their own account
Google
Confirms who you are when you continue with Google, under your Google account’s own terms.
- What reaches it
- That you are signing in to AirBubble. It tells the sign-in service your email address, name and picture.
- Where it runs
- Under its own terms
- What it keeps
- Under its own privacy policy.
Paddle
Sells paid plans as our reseller and merchant of record, and handles payment, tax, receipts and refunds. Paddle.com Inc. sells to buyers in the United States, Paddle.com (Canada) Ltd to buyers in Canada, and Paddle.com Market Limited, of the United Kingdom, to buyers everywhere else.
- What reaches it
- Your email address, country and the billing details its checkout asks for, the plan you chose, and the network address of the checkout. Card details go straight to Paddle, never through us.
- Where it runs
- The United Kingdom and the United StatesThe United States for buyers there
- What it keeps
- Payment records as the seller, as tax law requires, under its own privacy notice.
Bubble speaks in the AirBubble voice.
Bubble speaks in the AirBubble voice, made by Cartesia from the text of each reply, or by ElevenLabs while Cartesia is down. If neither can be reached, he speaks with the voice built into macOS or Windows, on your computer. Turn his voice off in settings and no reply text is sent anywhere.
How you hear about a change
This page is the list. Before a new service starts handling anything of yours, we post it here, with the date, at least 30 days before it takes effect, and we email everyone who asked to be told. Write to subprocessors@airbubble.io to be added.
If you object to one
Write to subprocessors@airbubble.io and tell us why. We will tell you plainly whether the change can be avoided for your account. If it cannot, and you would rather not continue, you can stop your subscription and ask for what is owed back. The refunds page says how.
Removals, and urgent replacements
Taking a vendor off the list needs no notice, and we will still date the change here. Sometimes a vendor fails, or we have to move away from one for a security reason. An urgent replacement like that may have to happen before we can write to you. If it does, we will say so on this page and email everyone on the notice list afterwards, with what changed and when.
This website
Page views on this website are counted with Vercel Web Analytics, from Vercel, which already hosts it. What reaches it: the address of the page you open, without anything after a question mark, the site that linked you there, your browser and device type, and roughly where you are, worked out from your network address, which it does not keep. Nothing from the app reaches it. The cookies page has the detail.
Signing in to the app
You sign in to the app with Neon Auth, a service of Neon, which runs in the European Union (Frankfurt), on the page the app opens here if you continue with Google, or with a one-time code it emails you. What reaches it: your email address, the name and picture on your Google account if you continue with Google, the one-time code if you sign in with email, and the network address the request came from. It keeps the record of the account you sign in with, and a cookie on the sign-in page, which the cookies page describes.
If you continue with Google, Google confirms who you are and tells the sign-in service your email address, name and picture. Your Google account's own terms and privacy policy cover that step.
What this list covers
It covers every third party that processes something of yours to make the product work. It does not cover our own internal tools, which never receive your screenshots, audio, transcripts or notes.
Card details go straight to Paddle, never through us, and we never store a card number.
What is collected and how long it is kept is on the privacy page. How your data is protected on its way to us is on the security page.
Questions about this page? Write to hello@airbubble.io, or read the trust centre.