Subprocessors
Subprocessors
Plain-English version: five services help us deliver GlidePath Money to you; none of them ever see your financial data. This page lists each one, what it does, what data passes through it, and where to read their privacy commitments.
Draft list — being reviewed by counsel before public launch.
Last updated: May 26, 2026
Who’s on this list and why
A “subprocessor” is a vendor we use to help run GlidePath Money. Each one is scoped narrowly: payment goes through Paddle, transactional email through Resend, hosting through Cloudflare, the AI helper through Anthropic, and stock-price refreshes through a proxied call to Yahoo Finance. None of them sees your financial data — transactions, balances, holdings, account names — because that data never leaves your machine. See the Privacy Policy for the full picture of what we do and don’t collect.
| Subprocessor | Function | Data they see | Location | Their privacy policy |
|---|---|---|---|---|
| Paddle | Merchant of Record — payment processing, global tax remittance, refund handling, dunning | Your name, email, billing country, payment method, transaction history (held by Paddle as the seller of record) | UK / EU / US | paddle.com/legal/privacy |
| Resend | Outbound transactional email — license keys, welcome notes, sign-in codes, operational replies | Email body in transit (not retained); destination email address | US | resend.com/legal/privacy-policy |
| Cloudflare | Marketing-site hosting (Pages), Worker API endpoints, DNS, your private tunnel + Access policy, Email Routing, D1 customer database | Encrypted traffic in transit, DNS lookups, request metadata (timestamps, URLs, status codes), customer record (email, subdomain, license key, Cloudflare resource IDs). Cloudflare never sees the decrypted contents of your tunnel. | Global edge network | cloudflare.com/privacypolicy |
| Anthropic (Glide AI helper, optional) | Conceptual Q&A in the Glide AI panel — powered by Claude Haiku through our Worker proxy | The question you type and the page context we send (page name, current section). Never your transactions, balances, or holdings. Anthropic processes commercial API traffic per their privacy commitments and does not train on it. | US | anthropic.com/legal/privacy |
| Yahoo Finance (via our Worker proxy) | Holdings price refresh — we proxy the lookup so Yahoo never sees your IP | The list of ticker symbols you hold (just symbols — never quantities, account names, or your identity) | US | legal.yahoo.com/us/en/yahoo/privacy |
What about Anthropic and my data?
Glide AI is an optional explainer feature. When you ask Glide a question like “what is a Roth conversion?” or “why does this Monte Carlo run show a wide range?”, we send Anthropic your question text and minimal page-context (the page name, the feature you’re on). We do not send your transactions, balances, holdings, or any data from your DataFolder. Glide AI is sandboxed from your data by design. See the security page for the architecture.
How we choose subprocessors
We pick vendors who: (a) charge per usage rather than per seat, so you don’t pay for someone else’s business model; (b) commit to not training on or selling customer data; (c) operate at a scale that gives us reasonable security guarantees without requiring us to lock you in.
Changes to this list
If we add or replace a subprocessor, we’ll update this page and email everyone with an active license at least 30 days before the change takes effect. The most recent version is dated at the top.
Contact
Questions about subprocessors or data flows: privacy@glidepathmoney.com.