# Saylark Sub-processors

**Last updated:** 2026-04-07

Saylark is operated by **Logic Fusion, LLC**. This page lists the third-party companies ("sub-processors") that help us deliver Saylark. We update it whenever we add or remove a sub-processor. Material changes are announced in-app at least 30 days before they take effect.

## Current Sub-processors

### OpenAI, LLC
- **Purpose:** AI text generation (summaries, action items, speaker labels, style rewrites, daily summaries) and text-to-speech.
- **Data sent:** Transcribed text only. Never raw audio.
- **Location:** United States.
- **Security / privacy:** https://openai.com/enterprise-privacy
- **Training commitment:** OpenAI does not train models on data submitted via the API, per their Data Processing Addendum.

### Supabase Inc.
- **Purpose:** Authentication, PostgreSQL database, object storage, edge functions.
- **Data stored:** Account email, display name, avatar URL, team memberships, shared tasks/items, user stats, name links, invitations, optional voice embeddings, shared dictation links.
- **Location:** United States (primary region).
- **Security / privacy:** https://supabase.com/security
- **Certifications:** SOC 2 Type II.

### Apple Inc.
- **Purpose:** macOS system frameworks (ScreenCaptureKit, EventKit, SwiftData, AVFoundation, etc.), code signing, optional Mac App Store distribution and billing.
- **Data shared with Apple:** None beyond standard OS telemetry. Saylark does not forward app content to Apple.
- **Location:** United States.

### Stripe, Inc.
- **Purpose:** Subscription payment processing (when not paid through the Mac App Store).
- **Data sent:** Payment tokens, billing email, subscription metadata.
- **Location:** United States.
- **Security / privacy:** https://stripe.com/privacy
- **Certifications:** PCI-DSS Level 1.

## How We Assess Sub-processors

Before engaging a new sub-processor, we review:

1. Their security posture and third-party certifications.
2. Their data-protection commitments (DPA, SCCs where applicable).
3. Whether their scope of processing is proportionate to the feature they support.
4. Their incident-response and breach-notification practices.

## Questions

Email **voice@logicfusion.net**.
