Subprocessors — Eventide
Effective date: 2026-09-19 Last updated: 2026-10-15
Public list. Our Privacy Policy (§6) promises that a small number of service providers process member data only to provide the service to us; this page names them all. If a provider is not on this page, it does not process member data.
| Provider | What they process | Purpose | Location | Data processing agreement |
|---|---|---|---|---|
| (none: our own hardware) | The application servers and the database run on hardware we control, reached through a Cloudflare tunnel. Profiles, messages and coordinates are held here and nowhere else. | Hosting | United States | Not applicable; no third party |
| Cloudflare, Inc. | Photograph storage (R2, a private bucket read through our own worker), including the photographs, depth images and videos from the liveness check at signup (Privacy Policy §3.8) the proof images members upload in Experience (Privacy Policy §3.9), and a host's photo ID (Privacy Policy §3.10), which it holds for us only so that we can keep them until the deletion dates in Privacy Policy §7; and the network tunnel carrying traffic to our servers | Photo storage and delivery; network | Photographs: Eastern North America | Cloudflare's Data Processing Addendum (version 6.4, effective 2026-04-03) is incorporated by reference into the Self-Serve Subscription Agreement every Cloudflare account accepts (Terms §6.1, "Data Processing"); it binds Cloudflare as our processor without a separate signature. Read 2026-09-19 at cloudflare.com/terms and cloudflare.com/cloudflare-customer-dpa. |
| Resend (Plus Five Five, Inc.) | Transactional email: verification codes, account notices, and the emails to a church leader a member names for the church badge. Receives the member's email address, or the leader's, with the member's first name and church. | Email delivery | United States | Resend's Data Processing Addendum states that it "shall become legally binding upon Customer entering into the Agreement", that is, on acceptance of Resend's Terms of Service, and incorporates the EU standard contractual clauses as deemed signed. No separate signature is offered or required. Read 2026-09-19 at resend.com/legal/dpa (page last updated 2026-08-27). |
| Apple Inc. | Sign in with Apple identifiers; push notification delivery; purchase processing and verification | Platform services | — | Covered by the Apple Developer Program License Agreement |
| OpenRouter, Inc. (processes data only while the optional conversation-starter feature or the language check on like notes is offered in the app) | The approved bio and prompt text and the temporary private answers described in Privacy Policy §3.6, sent only after both members of a match turn the feature on; and, for the language check in Privacy Policy §3.9, the text of a note sent with a like and nothing else about either member. The two members are labelled "A" and "B", and each carries a control number from 0 to 3 saying how many private questions the model may still ask them. No photographs, messages, names, ages, location, church, conference, diet, verification data, nothing from the liveness check, contact details, account or device identifiers, or subscription data. Every request requires zero data retention, denies data collection, pins Mistral, forbids fallback and requires structured output. | Route each request to an approved Mistral language-model endpoint | United States company; nothing is stored | OpenRouter Terms of Service and Privacy Policy, each last updated 2026-08-31. The Terms incorporate OpenRouter's Data Processing Agreement by reference for commercial use (§10.2); no separate signature is offered or required. §6.2 makes prompt and chat logging an opt-in licence, and we have not opted in: on the account's Privacy page the "Allow 1% data discount in workspaces" option (the mechanism by which OpenRouter would retain inputs and outputs) is off, and all three data-training toggles are off at account level and in the workspace guardrail (confirmed 2026-09-19). Each feature has its own key, and both live in a dedicated "Eventide" workspace whose guardrail enforces zero data retention for every model group (zero retention only, set 2026-10-15), allows one provider (Mistral) and one model, Mistral Medium 3.5 (mistralai/mistral-medium-3-5), used by both features (Mistral Small until 2026-09-19 and Mistral Medium 3.1 until 2026-09-23 for the starter), and turns every data-training option off. Each key is capped at US$5 of spend per month (the starter's checked 2026-09-24, the language check's set when it was created on 2026-10-15). |
| Mistral AI (processes data only while either feature is offered; reached through OpenRouter) | The same limited content, received as OpenRouter's traffic on whichever Mistral endpoint OpenRouter selects for a request that requires zero data retention | Generate the private questions and the one shared conversation starter; judge whether a like note contains offensive language | French company; a request may be processed outside the United States; nothing is stored | No direct contract; Eventide is not a Mistral customer. Mistral processes our requests under OpenRouter's own agreement with Mistral; OpenRouter's Terms (§5.1) bind us to Mistral's Model Terms by use and state that OpenRouter does not modify or waive them. What keeps a request off a retaining endpoint is OpenRouter honouring its own per-request zdr flag, which its documentation says restricts routing to endpoints it classifies as zero-data-retention, plus the workspace guardrail above; OpenRouter does not publish, and its API did not return to us (2026-09-19), a per-endpoint data policy a customer could check, so we have not independently verified which Mistral endpoint serves a given request. Mistral's published Commercial Terms of Service (effective 2026-08-05) §4.2 exclude training on customer data unless a customer opts in; its Data Processing Addendum (effective 2026-07-27) waives abuse-monitoring retention where zero data retention is activated; its Privacy Policy (effective 2026-09-03) otherwise keeps API input and output for thirty rolling days for abuse monitoring, which is why every request requires zero retention. |
¶Our commitments
- We add a provider to this page before it processes any member data, and we update the "Last updated" date when we do. If a change would materially affect your privacy, we tell you under Privacy Policy §12 as well.
- Every provider is bound by contract to process member data only on our instructions and only to provide the service to us. Where a provider reaches a further provider on our behalf (OpenRouter to Mistral), the row says so, names the terms that carry the obligation down the chain, and states what we have and have not been able to verify.
- Nobody on this list is an advertising or analytics company, and none of them receives data for their own purposes. We do not sell personal information and we have no advertising business.
Questions: support@eventidedating.com.