PamAI Sub-processors
Version 2.0 · Effective 27 October 2026 · Last updated 27 October 2026
PamAI (Frame AI Transformation Agency Ltd) uses the third parties below to provide hosting, authentication, storage, AI processing, transcription, web fetching, messaging, payments, email, sandboxed code execution and error monitoring.
Service providers
| Provider | Purpose | Data handled |
|---|---|---|
| Supabase | Database, authentication and private file storage (including files synced from the Desktop app) | Account data, workspace/project data, web chats, files, agent memory |
| Railway | Backend and scheduler hosting | All data our server processes in transit; operational metadata and redacted server logs |
| Vercel | Web hosting and Vercel AI Gateway | Web app delivery; routing of AI requests to the inference providers below |
| Cloudflare | Browser Rendering for agent web fetches; R2 hosting for Desktop app downloads and updates | Web addresses the agent opens and the fetched pages; IP address and app version when the Desktop app checks for updates |
| Groq | Voice-note transcription (direct, not through the gateway, not ZDR); AI inference through the gateway | Voice-note audio and transcripts; prompts and outputs (gateway requests are ZDR) |
| Resend | Transactional email | Email addresses, verification codes, magic links, notification content |
| Daytona | Sandboxed code execution and background agent runs | Project files, memory files (background runs), code execution input/output |
| Hostinger | Servers that host our self-run GlitchTip error monitoring and AI tracing | Error reports, stack traces, redacted operational context; AI agent traces with redacted prompt and output content (kept 1 month) |
| Twilio | WhatsApp transport | Phone numbers, message bodies, media |
| WhatsApp / Meta | WhatsApp upstream transport | WhatsApp identifiers and messages |
| Telegram | Telegram Bot API transport | Telegram identifiers, messages, media |
| Polar | Merchant of record, subscriptions, invoices, tax | Name, email, purchase history, billing/payment records |
| Stripe | Card processing through Polar | Payment instrument data handled by Polar/Stripe |
AI inference through the Vercel AI Gateway
Requests from the web app and server-side agent are sent through the Vercel AI Gateway with Zero Data Retention (ZDR) by default and are restricted to the hosts below. See the Privacy Policy, Section 7, for the exceptions.
| Provider | Purpose | Data handled |
|---|---|---|
| Anthropic | AI inference | Prompts and outputs, ZDR by default |
| OpenAI | AI inference; search embeddings (ZDR requested, host allowlist not applied) | Prompts and outputs; text to be indexed for search |
| Google (Gemini API and Vertex AI, including Anthropic models on Vertex) | AI inference | Prompts and outputs, ZDR by default |
| Amazon Bedrock | AI inference; search re-ranking with the Cohere Rerank model (ZDR requested) | Prompts and outputs; search queries and candidate results |
| Microsoft Azure | AI inference | Prompts and outputs, ZDR by default |
| Baseten | AI inference | Prompts and outputs, ZDR by default |
| Cerebras | AI inference | Prompts and outputs, ZDR by default |
| DeepInfra | AI inference | Prompts and outputs, ZDR by default |
| Fireworks | AI inference | Prompts and outputs, ZDR by default |
| Groq | AI inference | Prompts and outputs, ZDR by default |
| Together AI | AI inference | Prompts and outputs, ZDR by default |
First-party China AI endpoints are excluded from the allowlist. Chinese-origin open-weight models may be offered only when served by the vetted hosts above.
Services you connect or choose (not our sub-processors)
These services receive or provide data because you connect them or use your own account with them. Your relationship with them is governed by your own agreement with each service.
| Service | How it is involved |
|---|---|
| Anthropic (Claude Code) and OpenAI (Codex) — your own account | In the Desktop app, chat runs on your own Claude Code or Codex account. Prompts, project files the agent reads and replies go from your Mac to that provider under your account's terms, outside PamAI's ZDR arrangements. |
| Notion, ClickUp, GitHub, YouTrack, Granola | Desktop app sources. PamAI reads the content you select and imports it into your project. ClickUp connections install webhooks in your ClickUp workspace. |
| Local folders on your Mac | Desktop app source. Files you select are read on your Mac and imported into your project. |
| Google sign-in and Google Calendar, Telegram, WhatsApp | Web integrations you can connect or sign in with. |
| Project collaborators and share guests | People you invite or share a project with can see that project's content, including imported source text. |
We may update this list as providers change. Material changes will be reflected with an updated date.
Questions? Contact amir@trypamai.com