Subprocessors

• Vercel hosts the public web application, serves the Next.js deployment, and provides cookie-free Web Analytics for redacted page paths and coarse product events. Query strings, fragments, and /s snapshot routes are excluded by application controls.
• Google Gemini may process aggregated crosstab summaries and the user's typed question only when the server AI endpoint is enabled and the user explicitly asks for server AI analysis.
• Optional AI analysis is routed through Vercel AI Gateway after the user submits the disclosed aggregate context. Provider routing can change during failover; source spreadsheet rows are not included in that request.
• npm package registries provide open-source application dependencies during development and build.

• No account database is configured in this public app.
• No payment processor is configured in this public app.
• No customer support platform or CRM is configured in this public app.

Before selling to a regulated enterprise buyer, convert this page into a maintained legal subprocessor schedule with owner, purpose, data categories, regions, and notification terms.