Subprocessors and Third Parties
01Core service providers
| Provider/category | Purpose | Data involved |
|---|---|---|
| Anthropic | Commercial AI API and Agent SDK | Prompts, conversation context, attachments, tool definitions, output and usage |
| OpenAI | Commercial AI API and Codex App Server for selected agent models | Prompts, conversation context, attachments, tool definitions, output and usage |
| Fastly | Content delivery, TLS edge and traffic delivery | IP address, request metadata and delivered content |
| OxaPay | Current cryptocurrency checkout and confirmation | Order/payment reference, plan price, selected asset/network and transaction status |
| Hosting infrastructure (legal name pending) | Application, private storage and backups | Account, content, workspace, logs and billing records |
| Configured mail transport (legal name pending) | Verification, reset, security, usage and plan email | Email address and message content |
| Browser push services | Optional web notifications | Push endpoint, device/browser routing data and notification content |
Infrastructure and mail vendor legal names depend on the production deployment. They must be confirmed in the merchant-readiness review before card processing is activated.
02Optional services you connect
| Service | When used | Typical data |
|---|---|---|
| Google identity | If you choose Google sign-in | Name, email, profile image and OAuth account identifier |
| Google Workspace | If you connect Gmail, Calendar or Drive | OAuth tokens and the data/actions requested within granted scopes |
| Apple Music | If configured and connected | Music authorization, catalog/library requests and playback state |
| Remote MCP/API services | If you add or invoke them | Instructions, headers, credentials and task data needed for the call |
03User-directed websites
A website or API visited through Agent mode is usually an independent third party, not an Orrerie subprocessor. It receives the requests, cookies, account information, files and form values required by your authorized instruction. Its terms and privacy policy apply.
04Changes and card processing
Providers can change as infrastructure evolves. Material additions will be reflected by the date above and, where appropriate, an in-service notice. Stripe is not currently an Orrerie processor and must not be listed as active until the account, legal entity and integration exist.
Questions about a provider or international transfer can be sent to hello@orrerie.com.