Subprocessors
The vendors that touch personal data on Mochi's behalf, and what each one sees.
Not yet reviewed by a lawyer
Current list
| Vendor | Purpose | Data |
|---|---|---|
| Clerk | Authentication and identity | Email address, sign-in method, session recordsHolds no note content, audio or transcripts. |
| Polar | Payments, merchant of record, licensing | Billing details, subscription status, licence activationsIs the seller of record and issues invoices and refunds. |
| Not yet selected | Pet image generation | One uploaded photograph, per generationMust contractually not retain and not train on submitted images. The vendor is not final, so it is not named here. |
| Cloudflare | Website and API hosting, database, object storage, transactional email | Account records, subscription and licence records, generated pet artwork, waitlist addresses while the waitlist is open, IP address and request metadataHolds no note content, audio or transcripts, and there is no table or bucket that could. Transcription never reaches it. |
What no subprocessor ever receives
Your audio, your transcripts, your notes, your voice profiles, your screen captures and your model provider keys. None of those reach a Mochi server, so none of them can reach a Mochi vendor.
Your model provider is not a subprocessor. You contract with them directly with your own key, and that traffic goes from your Mac to them without passing through us.
Changes to this list
Adding or replacing a subprocessor is a change worth telling people about, and the mechanism for doing so needs to be defined before launch. To be told about changes in the meantime, write tohi@brandnuits.com.
Placeholder, pending legal review
This list reflects the intended architecture. It is not final and it has not been reviewed.
Before the EU launch, each vendor above needs a signed data processing agreement and standard contractual clauses on file, the image generation vendor needs to be chosen and named here, and the notice period for adding a subprocessor needs to be stated.
Who you are dealing with
Mochi is published by Nuits, a Finnish toiminimi (sole trader).
The registered business address and business ID are withheld for privacy and are available on request. Write tohi@brandnuits.com and you will get them.
All legal and support enquiries go to the same address:hi@brandnuits.com.