Last Updated: 2026-05-27
What this page is
A subprocessor is a third party that processes data on our behalf in order to provide the Chelae service. We disclose them publicly so you can see who has potential access to data flowing through Chelae, where they're located, and what they do for us. This page is updated when the list changes.
If you have questions about the items below, contact privacy@plausibleindustries.com. For the broader privacy posture (what data we collect, how long we keep it, your rights), see our Privacy Policy.
Current subprocessors
| Provider | Purpose | Data categories | Location |
|---|---|---|---|
| Amazon Web Services, Inc. (AWS) | Cloud infrastructure hosting the relay layer (the routing service between the iOS app and your home server), authentication service, push-notification dispatch, and operational logs. | Account identifiers, device tokens, ephemeral message routing data, request metadata, server logs. | United States (us-west-2 primary; us-east-1 for global edge / CloudFront). |
| Apple Inc. | Apple Push Notification service (APNs) — delivers wake notifications to the iOS app. App Store distribution and TestFlight beta delivery. Sign in with Apple (when used). | APNs device tokens, notification payloads (subject + short preview only), App Store / TestFlight account identifiers, Sign in with Apple identity tokens. | United States and other Apple data center locations globally. |
| Anthropic, PBC | If your home OpenClaw server is configured to use Anthropic's Claude model as its AI backend, prompts and responses flow to Anthropic during agent operation. Configured locally by you on your own server; Plausible Industries does not proxy this traffic. | Conversation text you send to your home server while Claude is the active model, plus any tool-call inputs/outputs the agent invokes. | United States. |
| OpenAI, L.L.C. | If your home OpenClaw server is configured to use OpenAI models (GPT, the TTS service, etc.), corresponding requests flow to OpenAI. Configured locally by you on your own server; Plausible Industries does not proxy this traffic. | Conversation text and/or audio you direct to OpenAI-backed components, plus tool-call inputs/outputs. | United States. |
| GitHub, Inc. (a Microsoft subsidiary) | Source-code hosting; release distribution of installer scripts and the OpenClaw Channel Plugin via GitHub Actions and GitHub's CDN. | Source code, binary release artifacts. No end-user message data. | United States. |
| Google LLC (Google Analytics 4) | Aggregate, privacy-respecting traffic analytics for the chelae.net marketing website only. IP anonymization on; 14-month retention; Google Signals off. Honors Global Privacy Control and the cookie banner — no analytics fire without consent. | Anonymized IP, anonymous session and page-view events on chelae.net. No data from the Chelae iOS app or relay. | United States and other Google data center locations globally. |
What's NOT a subprocessor
A few categories that intentionally aren't on this list, with the reasoning:
- Your home OpenClaw server. That machine is yours. We aren't the ones processing data there — you are. Whatever model or tools the server reaches (HomeKit, Reminders, your local file system, any AI provider you've wired up) is governed by your own setup and the policies of the providers you chose, not by us.
- Email providers used for legal / support notices. Currently Plausible Industries uses standard email infrastructure for inbound legal and support mail. We treat that channel as a contact mechanism, not as a processing-of-your-app-data path — it doesn't carry conversation content from the app.
Updates
We give at least 30 days' notice before adding a subprocessor that will have access to user message content from the app. We may silently add or replace infrastructure subprocessors (e.g., a CDN tier, a hosting region rebalance) that do not have access to message content, but this page will still reflect those updates in the "Last Updated" date.
If you want to be notified of changes, email privacy@plausibleindustries.com and ask to be added to the subprocessor change notification list.