Lever Today · Legal
Sub-processors
Last updated: September 27, 2026
We use a small number of third-party services to run Lever Today. This page lists every one that may process your personal data, what it is used for, and which country it operates in. It is the companion to Section 6 of our privacy policy.
We keep this list current. If we add a sub-processor that handles personal data, we will update this page and give notice before the change takes effect.
1. Running the service
These are necessary to provide Lever Today at all.
| Service | Purpose | Location |
|---|---|---|
| Hostinger | Server and database hosting | EU (Lithuania) |
| Authara | Sign-in and account security | Our own server |
| Razorpay | Subscription payments. The card or other payment details you enter at Razorpay's checkout go to Razorpay — we never see them | India |
| Zoho Corporation (Zoho CPaaS / ZeptoMail) | Delivers account, billing and notification emails, and the one-time invitation you can choose to send a contact | United States |
| Expo | Relays push notifications to your phone — through Google (Android) or Apple (iOS) — and serves app updates. Receives your device's push token and each notification's title and text | US |
| Object storage (S3-compatible) | Stores the profile photo you upload, at a public but unguessable address | — |
| Sentry | Crash and error reports from the app, the website and our servers. Configured not to attach your name, email address or IP address, and to drop request contents and cookies; a report can still include technical detail such as a stack trace | US |
Cards you save in Lever Today are a different thing.The Cards feature lets you keep your own record of a card — including, if you choose, its full number, which you type in yourself. That number is encrypted at rest in our database, shown back only to you, and never passed to Razorpay or used for payments. The assistant's card tools only ever see its last four digits.
2. AI features
| Service | Purpose | Location |
|---|---|---|
| DeepSeek | Language model behind the assistant, routines and the Telegram and WhatsApp bots | China |
| Groq | Voice-to-text when you use voice input, including voice notes sent to the Telegram or WhatsApp bot. We do not keep the recordings | US |
Your health and financial data are never sent to the AI unless you explicitly allow it. Both are off by default, and you control each one separately under Settings → Privacy. Because our language-model provider operates in China — a country without an EU adequacy decision — that consent is also what permits the transfer (GDPR Art 9(2)(a) and Art 49(1)(a)). You can withdraw it at any time, and you can use Lever Today fully without enabling AI features at all.
3. Connected apps
| Service | Purpose | Location |
|---|---|---|
| Calendar, Fit, Drive, Gmail, Contacts — only the permissions you grant. Google Keep connects with an App Password you provide instead (see privacy policy §2) | US | |
| Composio | Connections to other apps you choose to link | US |
| Telegram | Chatting with the assistant and receiving routine results in Telegram, if you link it. Receives your chat ID and the messages exchanged | Multiple countries |
| Meta Platforms (WhatsApp Business Cloud API) | Chatting with the assistant and receiving routine results in WhatsApp, if you link it. Receives your WhatsApp phone number and the content of the messages exchanged with our business number | US / global |
These only receive data for integrations you connect yourself, and you can disconnect any of them at any time from Connectors on the web or Settings → Connections in the mobile app. If you add your own MCP server, the assistant sends it the tool requests you trigger; that server is one you choose, not one of our sub-processors.
4. Analytics — off unless you allow them
| Service | Purpose | Location |
|---|---|---|
| Google Analytics | Which pages and features get used | US |
| PostHog | Product usage analytics | US |
| Plausible | Privacy-first, cookie-free page counts | EU |
None of these load until you accept analytics in the consent banner, and they stop when you turn analytics off under Settings → Privacy. The mobile app does not use any of them.
5. International transfers
Where a sub-processor is outside your country we rely on an appropriate safeguard — standard contractual clauses, or your explicit consent for the AI transfer described above. See privacy policy §6 for detail, or write to us for a copy of the relevant safeguards.
6. Contact
Questions about this list: privacy@lever.today