Last updated: October 26, 2026
These are the providers that currently process personal data for AI Potluck and Alpha. This page is part of our Privacy Notice. We update it whenever we add, remove or change a provider, and the date above shows when it last changed. Which providers are active can change as models and features are turned on or off.
Website, accounts and data
Provider | What it does for us | Personal data it processes | Where | How long it keeps it |
Vercel | Website hosting and content delivery | All site traffic, including IP addresses in infrastructure logs | Germany. Requests may first reach a content-delivery location closer to you, including outside the EU. | 1 day |
Neon | Database | Accounts, conversations, ratings, problem reports and safety-screen results | Germany | As set out in the Privacy Notice data retention table |
Hugging Face | File storage | Files you upload | France | As set out in the Privacy Notice data retention table |
Resend | Sign-in emails | Your email address and sign-in code | United States | 30 days |
PostHog | Product analytics | Usage data, with anonymized IP addresses. Sets one first-party cookie. | United States | 7 years |
Axiom | Technical logs | IP addresses and account, session and conversation IDs. Not the content of your conversations | Germany for application and security logs. United States for hosting provider logs. | Application and request logs 30 days. Security logs 1 year. |
Fly.io | Hosts the service that manages the tasks Alpha carries out for you with an agent | The parts of your conversation and files a task needs and the task's results | Germany | Task records 30 days. Security records 90 days. |
AWS | Hosts the isolated sandboxes where code Alpha writes for you runs | The code, any files in the sandbox, and its output | Germany | Four hours after use. |
AI models
Provider | What it does for us | Personal data it processes | Where | How long it keeps it |
Cloudflare | Message routing classifier (Clef, Workers) | What you type, after a short pause and before you press send, to choose which model answers | United States | Not kept, ZDR. |
Current AI | Model router | Your conversation when you use a Mistral model. For every conversation, short requests that title it and decide whether to search, answered by Mistral Small. | United States | No prompt storage, just access logs for 7 days. |
Mistral AI | Serves the default model and other Mistral models, and checks messages to decide whether to show support resources | Your conversation | US & EU | See trust.mistral.ai |
Scaleway | Backup answers and second opinion | Your conversation, when the main service is busy or unavailable, or when you ask for a second opinion | France (Paris) | Not kept, except for up to two weeks when needed to investigate errors or abuse |
Public AI | Inference gateway for SEA-LION, ALIA, Bielik and Apertus | Your conversation, passed through without storing it | United States | A record that a request was made, without its content, for 7 days |
Infomaniak | Serves Apertus | Your conversation, in memory | Switzerland | Not kept |
Hugging Face | Model routing for backup answers, second opinion and arithmetic | Your conversation, passed to the model provider | US and EU | Logs up to 30 days |
Safety, search and moderation
Provider | What it does for us | Personal data it processes | Where | How long it keeps it |
Hugging Face | Safety screening | Every message and image sent in the chat | US & EU | No data retention. Only system logs for 30 days |
Current AI | Hosting for our moderation platform (Coop) | Messages flagged for child-safety review, and problem reports | European Union | As set out in the Privacy Notice data retention table |
Hugging Face | Search retrieval | Your question text | European Union | Logs for 30 days |
Firecrawl | Web search | Your question text, when Alpha searches the web | United States | Until we ask Firecrawl to delete it |