Sub-processors
WebDIY relies on the third-party providers listed here to host, power, and support the Service. We keep this list current with the providers we actually use.
Overview
To operate WebDIY, we use the third-party service providers below (our sub-processors). Each is bound by contractual confidentiality and data-protection obligations and may process personal data only to provide services to us. Our AI model providers process your content under agreements that prohibit them from using it to train their models; see the How your prompts and output are processed section of our Privacy Policy, which this page complements.
Current sub-processors
| Sub-processor | Purpose | Data processed | Primary location |
|---|---|---|---|
| Cloudflare | Hosting, CDN, edge compute, bot protection | Requests, IP, content, build artifacts | US / Global |
| Supabase | Platform database and authentication | Account, email, project and usage data | US |
| E2B | Sandboxed build and preview of your apps | Generated code and dependencies | US |
| Anthropic | AI model provider (Claude) | Prompts, chat, files, generated code | US |
| OpenAI | AI model provider (GPT) | Prompts, chat, files, generated code | US |
| AI model provider (Gemini) | Prompts, chat, files, generated code | US | |
| xAI | AI model provider (Grok) | Prompts, chat, files, generated code | US |
| OpenRouter | AI model routing to additional models | Prompts, chat, files, generated code | US |
| Neon | Databases and auth for the apps you build | Your end users' application data | US / EU |
| Sentry | Error monitoring and diagnostics | Diagnostic and error data (secret-redacted) | US |
| Resend | Transactional and account email | Email address, message content | US |
| Mailgun | Authentication one-time-passcode (OTP) email | Email address, one-time codes | US / EU |
| Stripe | Payments and subscription billing | Billing and payment information | US / Global |
Changes and notice
We may add or replace sub-processors as the Service evolves, and we will update this page when we do. Business customers under a data-processing agreement may subscribe to advance notice of new sub-processors and object on reasonable data-protection grounds. Questions regarding this page may be directed to Lumeio, Inc. at compliance@web.diy.