Sub-processors

Last updated: July 30, 2026

This page lists every third party that processes data in connection with Vrge, grouped by who controls the relationship. We update this page before adding new services that materially affect our processing. For background on our data posture, see the Privacy Policy.

Engaged by TRD Ventures

Services we use to run the business — purchase, license, support, website.

Sub-processors engaged by TRD Ventures
Service	Purpose	Data	Location	Default
Lemon Squeezy (Merchant of Record)	Payments, license issuance and validation, tax compliance	Name, email, country, payment details (we never see card numbers). After activation, each launch re-checks the license — sending the license key and the per-device activation id Lemon Squeezy issued, plus the connection metadata any request carries. Never any of your business data.	United States	Always-on
Cloudflare Web Analytics	Cookieless website traffic measurement	Aggregate page views, coarse geography. No cookies, no fingerprinting.	Global (Cloudflare network)	Always-on
Google (Workspace — Forms, Sheets, Mail)	Waitlist sign-ups before launch, and hosting the getvrge.com mailboxes	Email address, submitted from the homepage or the download page, plus the connection metadata any web request carries (IP, user agent, timestamp) — the form posts from your browser directly to Google. Also any support, privacy or security correspondence you send us.	Global	Opt-in
Resend	Waitlist confirmation email at signup, and the launch announcement later	Email address, used to send your sign-up confirmation and kept for the launch announcement, plus delivery metadata (sent, bounced). No open or click tracking.	United States	Opt-in
Cloudflare Pages	Marketing website hosting	Request logs (IP, UA, URL) retained briefly for abuse prevention	Global	Always-on
Cloudflare (Vrge Cloud Backup)	Hosted backup storage for the optional Cloud Backup subscription	Snapshots encrypted on your device (AES-GCM, key derived from your recovery code) before upload, stored in R2; subscription status in D1. Neither Cloudflare nor Vrge holds the key, so neither can read a snapshot.	Global (Cloudflare network)	On purchase
Cloudflare (Vrge Managed AI proxy)	Relays inference for the optional Managed AI subscription	Prompt content in transit only. Persisted in D1: license key, timestamp, provider, model, token counts, task type, redaction mode, call status, and in team mode an opaque member id. No prompt or response body is ever stored.	Global (Cloudflare network)	On purchase
Cloudflare (connection relay)	Completes sign-in for sources whose provider requires a confidential secret — Plaid, Stripe, Square, QuickBooks	Authorization codes (and the QuickBooks company id) held at most 10 minutes, deleted on first read; per-IP rate-limit counters for about an hour. For Plaid only, bank transaction reads pass through in transit and are never stored. Access tokens are returned to your device, not retained.	Global (Cloudflare network)	Opt-in
Cloudflare (desktop update feed)	Serves desktop app updates	Request metadata (IP, app version, platform) when the app checks for an update	Global (Cloudflare network)	Always-on
Anthropic (Vrge Managed AI)	Cloud inference for the optional Managed AI subscription, where Vrge relays the call instead of you supplying a key	Redacted prompt content. The managed tier is floored to summary/strict redaction and can never send raw full content.	United States	On purchase

Third parties you can turn on inside the app

Off by default, and connected with your own account. For most of them — Gmail, Outlook, your own AI key, your own mail host — calls go straight from your device to the provider and the provider becomes your sub-processor, not ours. Four are different. Plaid, Stripe, Square and QuickBooks need a client secret a desktop app cannot safely hold, so by default signing in — and every later token refresh — completes through Vrge's connection relay, and for Plaid the transaction read passes through it too. That relay is listed above as one of ours, because it is. Each of the four also offers an advanced path where you supply your own credentials and nothing touches us.

Third parties you can enable inside the app
Service	Purpose	Data	Location	Default
Anthropic	Cloud AI (Claude) for extraction / classification	Redacted prompt content (or full content if you opt in per-source)	United States	Opt-in
OpenAI	Cloud AI for extraction / classification	Redacted prompt content (or full content if you opt in per-source)	United States	Opt-in
Google (Gemini API)	Cloud AI for extraction / classification	Redacted prompt content (or full content if you opt in per-source)	Global	Opt-in
Google (Gmail / Calendar)	Optional email / calendar source	Read-only OAuth access; tokens stored on your device only	Global	Opt-in
Microsoft (Outlook / Graph)	Optional email / calendar source	Read-only OAuth access; tokens stored on your device only	Global	Opt-in
Plaid	Optional bank-account source (read-only transactions)	Bank transactions read through Vrge's connection relay in transit — see the relay row above. Never stored by Vrge.	United States	Opt-in
Stripe	Optional income source (read-only balance transactions)	Read-only payment records, including the payer's name and email where Stripe provides them. Sign-in completes through Vrge's connection relay.	United States	Opt-in
Square	Optional income source (read-only settled payments)	Read-only payment records, including buyer email where Square provides it. Sign-in completes through Vrge's connection relay.	United States	Opt-in
Intuit (QuickBooks Online)	Optional accounting source (read-only invoice sync)	Read-only invoice records, including the customer details QuickBooks carries on them. Sign-in completes through Vrge's connection relay.	United States	Opt-in
Your own IMAP / CalDAV / ICS host	Optional email / calendar source for any other provider	Read-only access using credentials you enter; the connection goes from your device straight to the host you name (iCloud, Fastmail, Nextcloud, or any other server you point it at). Vrge is not in the path.	Chosen by you	Opt-in

Team server — services you configure yourself

If you run the optional self-hosted Team server, you can wire it up to these services using your own credentials. TRD Ventures has no involvement and no access.

Team server services you configure yourself
Service	Purpose	Data	Location	Default
Stripe (Team server payment links)	Optional payment link generation on Team server	Invoice metadata; you supply the API key on your own server	United States	Self-host only
AWS S3 (optional)	Optional attachment storage on Team server	Uploaded files; you supply the bucket and credentials	Configured by you	Self-host only
Resend or SMTP (optional)	Optional email sending from Team server	Message bodies; you configure the provider	Configured by you	Self-host only

Change notifications

We will publish changes to this list here, with a revised date at the top. For material additions or changes (a new AI provider added by default, for example), we will also notify license holders by email at least 30 days before the change takes effect.