Subprocessors
Last updated: September 8, 2026
To provide every era, we rely on a small number of trusted companies that process personal information on our behalf. We call these companies our subprocessors.
We engage each subprocessor under a written data processing agreement, or equivalent contractual terms, requiring them to protect your information with appropriate safeguards and to use it only to provide their service to us. A few providers that authenticate your sign-in act as independent controllers of the limited information they receive, under their own privacy terms. We choose our providers carefully, and we keep the list short.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
This page lists our current subprocessors. We keep it up to date so that adding or changing a provider does not require us to rewrite our entire Privacy Policy.
Our subprocessors
| Subprocessor | What they help us do | Information they may process | Location |
|---|---|---|---|
| Supabase | Database, account sign-in, and file and media storage | Account details and the content you create — letters, photos, voice, and video — including information about the children you write to | United States |
| Amazon Web Services | Secure file and media storage, long-term archival storage, and the processing that backs up, converts, and protects your media between our systems | The photos, voice recordings, and video you create or upload, including media relating to the children you write to; backup and archive copies of the same | United States |
| Netlify | Hosting and delivery of our application | Information in transit, and technical request data such as IP address | United States |
| Cloudflare | Domain (DNS), content delivery network, and encrypted off-site backup of media files | Information in transit and network data such as IP address; and backup copies of the media you create or upload | United States |
| Resend | Sending email — account and transactional email, delivery notices to recipients, and, where you have opted in, marketing email | Recipient email addresses (including a child's delivery email address supplied by a parent) and email content | United States |
| PostHog | Product analytics, to understand how the app is used and improve it. Not used on any recipient-facing page | Usage and device information and pseudonymous identifiers for account holders, subject to your consent where required | United States |
| Sentry | Error and performance monitoring, to find and fix problems | Diagnostic data, which may incidentally include technical request information | United States |
| AssemblyAI | Converting a voice recording into text (transcription), only when you turn transcription on | The voice recording you submit and the resulting transcript. Model training is disabled on our account | United States |
| Sign-in with a Google account | Your email address and basic profile information, for authentication | United States | |
| Apple | Sign in with Apple (on iPhone) | Your email or relay address and an authentication token | United States |
How we handle children's information
every era is used by parents and the family members they invite to create a private archive for their children. A child who receives a letter does not have an account; they read it through a private page their parent controls, and none of our analytics or advertising providers are used on that page. We treat children's information with particular care. You can find more about how we handle children's information, and the rights available to parents, in our Privacy Policy.
Changes to this list
We may add or replace subprocessors as the product grows. When we do, we will update this page, and we will provide advance notice where our agreements or applicable law require it.
Questions
If you have any questions about our subprocessors or how we protect your information, contact us at legal@everyera.com.
Subprocessors · Effective