Subprocessor List
quickCLIENT.ai · operated by Prism AI Apps LLC, a California limited liability company
Version 1.0 · Last updated: October 9, 2026
To provide quickCLIENT.ai (the “Service”), we use the third-party service providers (“subprocessors”) below, each acting on our behalf and bound to use information only to provide services to us. This list is referenced by our Privacy Policy and our Data Processing Addendum. We update this page and its date when the list changes.
Where processing happens
Our production database is hosted in the United States. We use service providers for hosting, AI processing, payments, communications, and diagnostics. Several of these are global companies and may process data in more than one country. We do not sell or rent personal information to any of these providers.
Current subprocessors
| Subprocessor | Purpose | Data handled |
|---|---|---|
| OpenAI | AI processing — transcription (speech to text), image/PDF text extraction, summaries, embeddings for search, and in-app help answers | The content you submit for processing (note/voice transcripts, uploaded images/PDFs, help questions). Per OpenAI's API terms, not used to train its models. |
| Supabase | Cloud database, authentication, and file storage | Your account, notes, files, Client Data, and metadata. Our production database is hosted in the United States. |
| Cloudflare (R2 + CDN/DNS/security) | Object storage and encrypted backups (R2); DNS, content delivery, and network security | Backup copies of stored files; network traffic and request metadata. |
| Vercel | Application hosting and delivery | Requests to run and serve the Service, including standard log and device/network metadata. |
| Stripe | Payment processing for web subscriptions | Billing contact and subscription/payment status. Card details are handled by Stripe, not stored by us. |
| Google Workspace (SMTP) | Outbound email delivery (account, security, and notification email to your own address) and receipt of messages sent to our support address | Recipient email address and message content of the emails we send you or you send us. |
| Google (Calendar API — only if you connect it) | Showing and changing events in a Google Calendar you connect | Your calendar list and event details (title, times, location, attendees, link). Google is your own account provider and processes this under its own terms. Never used for AI or advertising. |
| Email-routing provider (optional — email nudge) | Receives messages you choose to forward for the optional email nudge | Sender address and subject line only; never the message body. |
| Twilio (only if you enable SMS codes) | Delivery of one-time SMS sign-in codes | Your own mobile number and the verification code, used only to deliver the message. |
| Apple (APNs) and Google (Firebase Cloud Messaging) | Delivery of push notifications you turn on | A device/browser push token and the notification content — not your account content. |
| Sentry | Error and diagnostics monitoring | Diagnostic reports stripped of personal information before they leave the Service — no request bodies, cookies, headers, search terms, or account identifier (see Privacy Policy §4). |
| Google Analytics | Aggregate analytics on our public marketing pages only — never the signed-in app or Client Data | Standard aggregate visit/device/usage signals from marketing-page visits; suppressed for visitors in regions that require prior consent. |
Changes and notice
As the Service grows we may add or replace subprocessors. When we do, we update this page and the date above. Business customers to whom our Data Processing Addendum applies (it is incorporated into the Terms of Service) may request advance notice of new subprocessors as provided in that addendum.
Contact
Questions about this list? Contact Prism AI Apps LLC at support@quickclient.ai.