Subprocessors
Who processes your data
The companies Cachejay relies on to run the service, what each one handles, and why. Nothing on this list sells your data or trains AI models on it.
| Company | What it does for Cachejay | Data it handles |
|---|---|---|
| Amazon Web Services | Hosting: the server, the database, screenshot storage and sign-in email. Region us-east-1 (N. Virginia, United States). | S3: screenshots, when you have them turned on, deleted after 14 days. RDS (Postgres): account, license, device and team records. SES: your email address and the sign-in link and code we send you. |
| SkimmerDB | Stores and searches your notes and captures. One separate namespace per account. | Notes (days, weeks, months, projects, calls, to-dos) and captures: screen text, call transcripts, AI agent sessions and the text read from screenshots. Notes from projects you share with a team, in the team's namespace. |
| Anthropic | Writes notes, summaries and to-dos with Claude, through its API. | The text of each notes or summary job, up to 40,000 characters, with secrets masked first. Not used to train models, under Anthropic's commercial API terms. Not used if you choose Apple's on-device model, an AI tool on your Mac, or your own API key. |
| Stripe | Payments and billing. | Your email, plan and payment details. Cachejay keeps only your email, plan and Stripe customer ID; card numbers never reach us. |
| Resend | Sends sign-in email. Cachejay sends it through either Resend or Amazon SES. | Your email address and the sign-in code and link we send you. |
| Google and Apple | Optional sign-in, only if you choose Sign in with Google or Sign in with Apple. | They confirm your email address to us. We don't get access to anything else in those accounts. |
| WorkOS | Single sign-on and user provisioning, only for teams whose owner sets them up. | The team's name and verified domain; for each person who signs in through it, the profile their company's identity provider sends (email and name). With provisioning, the company's directory entries for its people. Never notes or captures. |
If you bring your own AI key
You (or your team's owner) can give Cachejay your own OpenAI, Google Gemini or Anthropic API key in place of Cachejay's AI. Then that provider receives the text of your notes and summary jobs, with secrets masked, under your own agreement with it, and bills your account. The key is kept encrypted on Cachejay's server and never sent to a Mac.
AI apps you connect
When you connect ChatGPT, Claude, Cursor, Codex or another AI app, it receives what it looks up in your Cachejay memory, because you asked it to. Those providers act for you, under your agreement with them, so they aren't Cachejay's subprocessors. You can disconnect them at any time.
Changes
We'll update this page before we start using a new subprocessor. If you have a DPA with us and want to be told by email, write to hello@cachejay.com.
Stop explaining your day to ChatGPT
Install it, connect the apps you use, and get on with your work. Free for 14 days, no card.