Sub-Processors
Last updated: March 2026
The following third-party sub-processors are engaged by LaunchPath to process personal data on behalf of our customers. For details on our data processing practices, see our Data Processing Agreement.
| Name | Purpose |
|---|---|
| Supabase | Database, authentication, file storage, and edge functions |
| Anthropic | AI language model processing (Claude models) and text embeddings |
| OpenRouter | AI model routing to multiple providers (OpenAI, Google, Meta, Mistral, DeepSeek, and others) |
| OpenAI | Audio transcription (Whisper) and image analysis for WhatsApp and voice channels |
| Stripe | Payment processing, subscription billing, and credit top-ups |
| Meta (WhatsApp Business API) | WhatsApp messaging channel for agent deployment, broadcasts, and drip sequences |
| Composio | Third-party app integrations (900+ apps including Google Calendar, Gmail, Slack, HubSpot, etc.) |
| Vercel | Application hosting, serverless functions, and CDN |
Supabase
Data: User accounts, agent configurations, conversations, contacts, campaign data, knowledge base embeddings, usage logs
Location: United States
Transfer: EU-US Data Privacy Framework (DPF)
Anthropic
Data: Conversation content for AI agent responses; knowledge base text for vector embeddings
Location: United States
Transfer: EU Standard Contractual Clauses (SCCs)
OpenRouter
Data: Conversation content routed to the AI model selected by the user for agent responses
Location: United States
Transfer: EU Standard Contractual Clauses (SCCs)
OpenAI
Data: Voice messages (audio) for transcription; images for visual analysis. Media is processed in real-time and not permanently stored
Location: United States
Transfer: EU Standard Contractual Clauses (SCCs) / UK IDTA Addendum
Stripe
Data: Payment card details (collected directly by Stripe), billing information, subscription status, invoice history
Location: United States
Transfer: EU-US Data Privacy Framework (DPF)
Meta (WhatsApp Business API)
Data: Phone numbers, message content, delivery statuses, media attachments (images, audio, documents) via WhatsApp
Location: United States / European Union
Transfer: EU-US Data Privacy Framework (DPF) / EU SCCs
Composio
Data: OAuth connection identifiers, integration action parameters, and action results as configured by the user
Location: United States
Transfer: EU Standard Contractual Clauses (SCCs)
Vercel
Data: HTTP requests, server-side rendering data, API route execution
Location: United States
Transfer: EU-US Data Privacy Framework (DPF)
User-configured integrations:In addition to the sub-processors above, you may connect third-party services to your agents via Composio integrations, webhooks, HTTP APIs, or MCP servers. These user-configured integrations are controlled by you and subject to the third party's own terms and privacy policies. LaunchPath acts as a conduit for data sent to these services at your instruction.
Change notification: We will notify customers at least 30 days before any intended changes to our sub-processor list, providing reasonable opportunity to object. Subscribe to updates by contacting karam@trylaunchpath.com.