Subprocessors
These are the companies that handle data for us when you use Hunting Apps. We choose them carefully and keep this list current. We change it before a new one starts handling your data, and say so in the changelog at the foot of this page. You can ask to be told of changes by writing to [email protected].
| Company | What it does | Data it sees | Where |
|---|---|---|---|
| Anthropic | Language model that reads and writes research text | The text of your messages, the pages and documents a run reads, and your instructions | United States |
| Zhipu AI (Z.ai) | Language model that reads and writes research text, and reads uploaded PDFs and photos | The same as above, plus the content of PDFs and images you upload to a project chat | Singapore, with the possibility of transfer to group companies in China |
| Moonshot AI | Language model that reads and writes research text | The text of your messages and the pages and documents a run reads | China |
| Serper | Web search | Search queries written by the research agent. Queries are about markets and products, and can contain words you typed | United States |
| Brave Search | Web search, used when the first search provider is unavailable | The same search queries | United States |
| GitHub (Microsoft) | Sign in with GitHub, and creating a repository in your own account when you hand a project off | Your GitHub profile and email on sign in. The build brief files you choose to push, which end up in a public repository | United States |
| Sign in with Google | Your Google name and email address on sign in | United States and European Union | |
| Creem | Merchant of record: takes payment, collects and pays tax, sends receipts, handles refunds and chargebacks | Your name, email, country and payment details, which Creem holds. We receive the fact and size of a payment, not your card | See Creem’s own privacy policy |
| Resend | Sends the emails the product sends: confirmation, password reset and payment notices | Your email address and the text of the message | United States |
| Hetzner | Hosting: the servers, database and backups | Everything stored in your account | European Union (Germany or Finland) |
About the AI providers
A run may use any of the three AI providers above, chosen by the task and by which one is available. We send them what the task needs: your message, the pages and documents being read, and our instructions. We use their paid API services. According to their published API terms, content sent through those services is not used to train their models unless the customer opts in. We have not opted in. We send no account email, name or payment detail to them.
Z.ai and Moonshot AI are based in Singapore and China, countries without an EU adequacy decision. When data goes to them we rely on the contractual terms they offer and on the limit that we send only what a task needs. For providers in the United States we rely on the EU–US Data Privacy Framework where the provider is certified, and on standard contractual clauses where it is not. If you do not want your content processed by a provider outside the EEA, do not upload it or write it into the service, and write to us to discuss your options.
Changelog
- 25 October 2026: first published list.