Transparency

Subprocessors

These are the third-party services FLUXE uses to run the platform, and what each one touches. We publish the full list rather than a general category description so you can see exactly who is involved.

Last updated: August 2026

Infrastructure

Service	Purpose	Data involved
Supabase	Database, authentication, and file storage	All platform data — accounts, project records, documents, uploads
Vercel	Application hosting and delivery	Requests, runtime logs, IP addresses

Communications

Service	Purpose	Data involved
Twilio	SMS and voice calls	Phone numbers, message contents, call audio and transcripts
Resend	Outbound and inbound email	Email addresses, message contents
Svix	Verifies inbound email webhook signatures	Webhook metadata
Telegram	Internal operator notifications	Operator alerts (no client data by default)

AI & Processing

Service	Purpose	Data involved
Anthropic (Claude)	Project assistant, intake chat, document and message analysis	Conversation contents, document text, project context
OpenAI	Realtime voice assistant and content moderation	Voice audio, property name and address, submitted prompts
Google (Gemini)	Site-walk video analysis	Site-walk video files, uploaded for processing and then deleted
Tripo3D	3D asset generation	Submitted prompts and generation parameters
Meshy	3D asset generation	Submitted prompts and generation parameters
Modal	3D reconstruction compute for site walks	Site-walk media and derived geometry

Business Operations

Service	Purpose	Data involved
Stripe	Payment processing	Billing details and transaction records. Card numbers go directly to Stripe and are never stored by FLUXE.
Mercury	Business banking and ACH confirmation	Payment and transaction metadata
Notion	Project, task, and meeting records	Project notes, task data, and meeting or call notes and transcripts
Google (Drive / Workspace)	Document ingestion and storage	Project documents you connect or share

Where we stand today

AI training: we do not send your data to any provider for model training. The AI services above are used through their business APIs, which do not train on submitted data by default.
We do not sell personal information.
Data processing agreements: we are working through each provider's standard DPA. We have not yet completed this across every vendor listed, and we will say so plainly until we have.
Certifications: FLUXE is not SOC 2 or ISO 27001 certified, and has not undergone third-party penetration testing. We will not claim otherwise.

Questions, or need something in writing before sharing confidential material? Email privacy@fluxe.life.