Subprocessors
Subprocessors
Plain-English version: by default, your financial data stays on your machine, and each service below touches only the narrow slice a specific feature needs. Two optional features you can switch on — AI categorization and email-inbox parsing — send limited transaction details to Anthropic if you enable them; we spell those out below. This page lists each service, what it does, what data passes through it, and where to read their privacy commitments.
Written in plain English, and in effect today.
Last updated: June 12, 2026
Who’s on this list and why
A “subprocessor” is a vendor we use to help run GlidePath Money. Each one is scoped narrowly: payment goes through Stripe, transactional email through Resend, hosting through Cloudflare, the AI helper through Anthropic, and stock-price refreshes through a proxied call to Yahoo Finance. By default your financial data stays on your machine, so by default none of them see it. The exceptions are opt-in: if you turn on AI categorization, we send a transaction’s payee, amount, date and account type (plus your own category names) to Anthropic; if you turn on the email inbox, forwarded email content is parsed by Anthropic and held transiently. Even then, none of them see your account names, balances, holdings, or who owns what. See the Privacy Policy for the full picture of what we do and don’t collect.
| Subprocessor | Function | Data they see | Location | Their privacy policy |
|---|---|---|---|---|
| Stripe | Payment processing + Stripe Tax (automated US sales tax + Canadian GST). QuickTech LLC is the seller of record; Stripe is the card processor. | Your name, email, billing address, payment method, transaction history (held by Stripe as our payment processor) | US (Stripe Inc.) with global infrastructure | stripe.com/privacy |
| Resend | Outbound transactional email — license keys, welcome notes, renewal reminders, operational replies | Email body in transit (not retained); destination email address | US | resend.com/legal/privacy-policy |
| Cloudflare | Marketing-site hosting (Pages), Worker API endpoints, DNS, your private tunnel + Access policy, Email Routing, D1 customer database | Traffic in transit, DNS lookups, request metadata (timestamps, URLs, status codes), customer record (email, subdomain, license key, Cloudflare resource IDs). Your private tunnel runs through Cloudflare’s edge, so — like any reverse proxy — Cloudflare can technically see request and response contents in transit there. We don’t store your data folder anywhere; it stays on your PC. | Global edge network | cloudflare.com/privacypolicy |
| Anthropic (optional AI features) | Three opt-in features, all powered by Claude through our Worker proxy: the Glide AI helper (conceptual Q&A), AI transaction categorization, and email-inbox parsing | Glide AI: only the question you type plus page context (page name, section). AI categorization (opt-in): a transaction’s payee, amount, date and account type, plus your category names — never account names, balances, holdings, or owner. Email inbox (opt-in): the forwarded email’s content, parsed transiently. Anthropic processes commercial API traffic per their privacy commitments and does not train on it. | US | anthropic.com/legal/privacy |
| Yahoo Finance (via our Worker proxy) | Holdings price refresh — we proxy the lookup so Yahoo never sees your IP | The list of ticker symbols you hold (just symbols — never quantities, account names, or your identity) | US | legal.yahoo.com/us/en/yahoo/privacy |
What about Anthropic and my data?
Glide AI is an optional explainer feature. When you ask Glide a question like “what is a Roth conversion?” or “why does this Monte Carlo run show a wide range?”, we send Anthropic your question text and minimal page-context (the page name, the feature you’re on). We do not send your transactions, balances, holdings, or any data from your DataFolder. Glide AI is sandboxed from your data by design. See the security page for the architecture.
How we choose subprocessors
We pick vendors who: (a) charge per usage rather than per seat, so you don’t pay for someone else’s business model; (b) commit to not training on or selling customer data; (c) operate at a scale that gives us reasonable security guarantees without requiring us to lock you in.
Changes to this list
If we add or replace a subprocessor, we’ll update this page and email everyone with an active license at least 30 days before the change takes effect. The most recent version is dated at the top.
Contact
Questions about subprocessors or data flows: [email protected].