1Hosting and network
- Hostmarket Inc. (United States)
- our hosting provider: the servers and storage for the Service, our databases, and the apps you publish. The servers are located in Germany (EU).
- Hetzner Online GmbH (Germany)
- operates the data centre in Germany where our servers are located.
- Cloudflare, Inc. (United States)
- domain names, network delivery and protection against attacks, encrypted backup storage, file downloads, some build sandboxes, and bot checks on forms.
2AI models
- OpenRouter, Inc. (United States)
- routes each AI request, including your Briefs and the relevant project content, to the company that runs the chosen model. By default we ask it to use only providers that do not keep request data for training.
- AI model providers reached through OpenRouter
- the company that runs the model handling a request, for example for text, code or images. Which company that is depends on the model chosen for the task, so the set changes as models change. OpenRouter lists each provider and its data policy.
- DeepInfra, Inc. (United States)
- turns text from your projects into search vectors so Pugi can find relevant context.
- AssemblyAI, Inc. (United States)
- turns voice input into text, when you speak to Pugi.
3Email and product analytics
- Resend (United States)
- sends account emails such as sign-in links, receipts and notices.
- Customer.io (United States)
- stores your email, plan and product events to send account and lifecycle emails, and product news if you signed up for it.
- PostHog, Inc. (United States)
- product analytics and masked session recordings, on our websites only after you accept analytics cookies.
- Google LLC (United States)
- Google Analytics and Google Tag Manager on our websites (cookies only after you accept), and Google sign-in if you choose it.
- Meta Platforms, OpenAI and Reddit (United States or Ireland, by your region)
- advertising pixels on pugi.io and logo.pugi.io, only after you allow Marketing cookies. They act as independent controllers under their own policies, not as our subprocessors.
4Payments and partners
- Stripe, Inc. (United States)
- payment processing for new purchases through Stripe Managed Payments, and the Stripe Connect connection for payments inside your apps.
- Link, LLC (United States)
- merchant of record for new purchases. It sells the plan or credits to you, collects tax and issues the receipt, as an independent controller for the payment.
- Polar
- merchant of record for subscriptions that started before our move to Stripe, as an independent controller for the payment.
- Affonso
- runs our affiliate program: tracks referrals and pays partners.
5Changes to this list
We update this page before a new subprocessor starts processing personal data, and change the version and date at the top. If you have a contract with us that gives you a right to notice or to object, we notify you under that contract.
Questions, or a request for our data processing terms: [email protected].