Sub-processors
Last updated: 2026-08-09
These are the third parties that process data on our behalf to run Nodeboard. This page is referenced by the Privacy Policy and is kept separate from it deliberately: infrastructure changes more often than a privacy policy should, and swapping a provider should not require every user to re-accept an agreement.
Infrastructure
| Provider | What it does | Location |
|---|---|---|
| Vercel | Hosting for the web application and its API routes | USA |
| Supabase | Authentication and primary database | USA |
| Neon | Database holding collaborative canvas state | USA |
| Cloudflare | Object storage for your assets (R2) and real-time collaboration (Durable Objects) | Global edge network |
| Fly.io | Generation worker and agent services | USA |
| Upstash | Rate limiting and short-lived operational state | USA |
| Sentry | Error monitoring and diagnostics | USA |
| Resend | Transactional email — sign-in, password reset, notifications | USA |
| Microsoft | Microsoft 365 / Exchange Online mailbox for operational, support, privacy and legal communications | Microsoft cloud regions |
Identity
| Provider | What it does | When |
|---|---|---|
| Sign-in with Google. We receive your email address, name, profile picture and Google account identifier. | Only if you choose to sign in with Google |
AI providers
There are two distinct cases here, and the difference decides whose account, whose contract and whose bill.
Providers you choose, running on your key. When you run a generation node, we transmit your prompt and media to the provider selected on that node — Replicate, fal, Google, OpenAI, xAI, Runway and others exposed by the node library — authenticated with your own API key. Your relationship with that provider is direct. Their terms and their privacy policy apply to that content, and the usage is billed to your account with them. We are a conduit.
Providers we use on our own account. Three features do not use your key:
| Provider | Feature | What it receives |
|---|---|---|
| Anthropic, via Vercel AI Gateway | The Lula assistant | Board context and your messages |
| Google, via Vercel AI Gateway | Prompt translation | The text being translated |
| Google, via Vercel AI Gateway | Automatic image description | The image being described |
Note that Google appears both here and under Identity above. Those are separate purposes with separate data.
Changes
We update this page when a provider is added, removed or replaced. If you want to be told in advance, write to privacy@nodeboard.ai and we will add you to the notification list.