Sub-processors

Last updated: 2026-04-18

Saylark is operated by Logic Fusion, LLC. This page lists the third-party companies ("sub-processors") that help us deliver Saylark. We update it whenever we add or remove a sub-processor. Material changes are announced in-app at least 30 days before they take effect.

Current Sub-processors

OpenAI, LLC

  • Purpose: AI text generation (summaries, action items, speaker labels, style rewrites, daily summaries) and text-to-speech.
  • Data sent: Transcribed text only. Never raw audio.
  • Location: United States.
  • Security / privacy: https://openai.com/enterprise-privacy
  • Training commitment: OpenAI does not train models on data submitted via the API, per their Data Processing Addendum.

Supabase Inc.

  • Purpose: Authentication, PostgreSQL database, object storage, edge functions.
  • Data stored: Account email, display name, avatar URL, team memberships, shared tasks/items, user stats, name links, invitations, optional voice embeddings, shared dictation links.
  • Location: United States (primary region).
  • Security / privacy: https://supabase.com/security
  • Certifications: SOC 2 Type II.

Apple Inc.

  • Purpose: macOS system frameworks (ScreenCaptureKit, EventKit, SwiftData, AVFoundation, etc.), code signing, optional Mac App Store distribution and billing.
  • Data shared with Apple: None beyond standard OS telemetry. Saylark does not forward app content to Apple.
  • Location: United States.

Stripe, Inc.

  • Purpose: Subscription payment processing (when not paid through the Mac App Store).
  • Data sent: Payment tokens, billing email, subscription metadata.
  • Location: United States.
  • Security / privacy: https://stripe.com/privacy
  • Certifications: PCI-DSS Level 1.

Amplitude, Inc.

  • Purpose: Product analytics to understand feature usage, onboarding completion, and diagnose errors.
  • Data sent: Anonymous device identifier, app version, macOS version, and event metadata (e.g., "dictation started", duration in seconds, mode name, engine, success/failure, error codes). When you are signed in, your Supabase user ID is included as a stable identifier. Amplitude's SDK also records your approximate IP-based location (country/region).
  • Never sent: Dictation text, meeting audio or transcripts, AI chat messages, snippet text, dictionary entries, custom mode names, or any content you author inside the app.
  • Location: United States.
  • Security / privacy: https://amplitude.com/privacy
  • Certifications: SOC 2 Type II, ISO 27001, HIPAA (Amplitude-side); not used in a HIPAA capacity by Saylark.

How We Assess Sub-processors

Before engaging a new sub-processor, we review:

  1. Their security posture and third-party certifications.
  2. Their data-protection commitments (DPA, SCCs where applicable).
  3. Whether their scope of processing is proportionate to the feature they support.
  4. Their incident-response and breach-notification practices.

Questions

Email voice@logicfusion.net.