Oshy Role Bots · Terms of Service · Privacy Notice · Data Processing Agreement · Subprocessors
Last updated 4 November 2026. This list forms Annex 3 of the Data Processing Agreement.
| Provider | Service | Data involved | Location |
|---|---|---|---|
| Vercel Inc. | Web application hosting and operational logs | All data passing through the web application; logs with secrets and content redacted | Functions run in Stockholm, Sweden (arn1); global edge network for delivery |
| Supabase Inc. | Managed PostgreSQL database | All stored workspace and account data | Stockholm, Sweden (eu-north-1) |
| Resend, Inc. | Account emails from Oshylabs (password resets, member invites) | Recipient name and email address, workspace name, the email text | Ireland (eu-west-1) |
These providers act under the Customer's own account and agreement. Oshylabs sends data to them only on the Customer's instruction (by adding a key or token and running a Bot), and they are not Oshylabs subprocessors.
| Provider | Service | Data involved | When |
|---|---|---|---|
| Anthropic | AI model processing (Messages API) under the Customer's own API key | Prompts containing workspace content and model responses | Every Bot run that uses a real model |
| GitHub | Repository connector: read file list; open a draft pull request after an admin approves it | Repository file list (not stored by Oshylabs); code and text in approved pull requests | Only if the Customer connects a repository |
| The Customer's email provider (for example Google, Microsoft, Zoho) | Sends approved emails and calendar invites from the Customer's own account over SMTP | Recipients, subject, message text and invite details of each approved email | Only if the Customer connects email |
| Slack or Microsoft | Posts approved messages to the Customer's channel through the Customer's webhook | The approved message text | Only if the Customer connects a channel |
We give at least 30 days' notice of a new or replacement subprocessor by email to each workspace owner and by updating this page.