These are the providers that run parts of the service for us and receive personal data to do so. Each receives only what its role needs, and is bound to protect it. Some receive data only if the studio connects them, or only once that option is enabled.
| Provider | Role | Receives | Location | When |
|---|---|---|---|---|
| Render | Application hosting | All data passing through the site | set when the server is chosen | Always |
| Neon | Database | Account details and the content saved in the service | set when the server is chosen | Always |
| Cloudflare | File storage, network and protection, receiving e-mail replies | Uploaded files, plans and images; clients' e-mail replies | Global network | Always |
| Resend | Sending system e-mail | Recipient address and the message | United States | Always |
| Anthropic | AI (smart planning, the assistant) | What a request sends: the planning data and the text | United States | Always |
| Google (Gemini API) | AI (smart planning, images) | What a request sends: planning data, text and images | United States | Always |
| OpenAI | AI (smart planning) | What a request sends: the planning data and the text | United States | Always |
| iCount | Subscription billing and invoices in Israel | Name, e-mail, business details; card details stay with them, not us | Israel | Always |
| Paddle | Billing outside Israel (when enabled), as merchant of record | Name, e-mail, country and payment details | United Kingdom | Once enabled |
| Sign-in, Google Calendar and Gmail — only for those who connect | Events in the chosen calendar, mail sent from the mailbox | United States | Only if connected | |
| Microsoft | Sign-in, Outlook calendar and mail — only for those who connect | Events in the chosen calendar, mail sent from the mailbox | United States | Only if connected |
| iCount · Morning · Sumit | The studio's own invoicing — only if the studio connects one | The client details on the invoice and its amounts | Israel | Only if connected |
| Green API | WhatsApp messages to the site's team about faults | The fault report and the reporter's contact details | set when the server is chosen | Always |
Changes to the list
We will add any new provider here and announce it by e-mail at least 30 days before it starts receiving data, as the Data Processing Agreement provides. Questions: office@d2plan.com.