Sub-processors
Everyone outside us who can see data from TheJay, and why that is.
This list belongs to the Data Processing Agreement and the privacy statement. If a party is added, we give at least 30 days' notice by email and you may object.
In use today
| Party | For what | Which data | Where |
|---|---|---|---|
| Nodge hosting |
Running the application, the database, and backups | Everything in TheJay, including your uploaded files | TODO — confirm region and establishment |
| OpenAI AI |
Writing and reading with the AI features — a caption, an email, a reading of a contract, an answer from the assistant — and turning a voice note into text. Only when you use one of those features | What that one request needs: the context of that post, release or question; the contract you ask it to read; the recording you made. OpenAI does not train its models on it. It keeps a request for up to 30 days to detect abuse, and a contract you have had read stays stored there, so it is not uploaded again, until it is deleted | United States |
| Mollie B.V. payments |
Charging your subscription and collecting payments made through TheJay | Name, email address, amount, payment details | The Netherlands (EU) |
About AI. Nothing goes to an AI provider unless you use an AI feature: you press the button to have text written, ask the assistant, have a contract read, or record a voice note. What goes is what that one request needs — not your whole network, not your music files. If you do not use one, this never happens; most features also have a variant that composes the text without a model.
Transfers outside the EEA
Only OpenAI processes outside the EEA. For that, the European Commission's Standard Contractual Clauses apply, together with OpenAI's own data processing terms.
Present in the product, but not in use
The following is in the software but not switched on in production today. No data goes to it.
- Instagram and Facebook (Meta), TikTok, YouTube (Google) and LinkedIn — publishing. No key is configured, so no account can be connected.
- Object storage (S3) — for large files. Not configured, so all uploads currently sit in the database at the hosting provider above, with a 12 MB per-file limit. Once this is switched on your browser uploads straight to that storage, and the provider moves into the table above. TODO — fill in the storage provider's name, country and place of business before the first upload
If we switch any of these on, it moves into the table at the top first and you get 30 days' notice.
What are not sub-processors
Social platforms you post to
When you publish to Instagram, TikTok, YouTube or LinkedIn, you give that instruction and it goes there directly, through your own connected account. That platform is a recipient on your instruction, not our sub-processor; what they do with it is in their own terms.
People you send a link to
When you send a demo or release link, you decide who gets it. We do not send those messages for you and do not see who you sent them to, unless you record the recipient in TheJay yourself.