Last updated 29 September 2026
Subprocessors
The companies that see personal data when you use underway. The privacy policy says why. A public DPA link is their document, not a claim that we have signed it.
Always on, to run the product
| Vendor | Purpose | Location | Their terms |
|---|---|---|---|
| OpenAI | Transcription of audio you recorded when the main transcriber is unavailable; speaking the interviewer's questions aloud (the question text); and the live co-host conversation, audio or on camera: your microphone audio during it, its transcript, and stills of a screen you share with the co-host. Never your camera. Separately, and only if you allow it, an advertising pixel on the public site that records a visit and the start of your free episodes | United States | Privacy · DPA |
| Anthropic | Interview direction, questions, assembly, derived text and answers in the Help panel | United States | Privacy · DPA |
| Supabase | Accounts, sign-in, and optional sync of your archive | Varies (project region, typically US or EU) | Privacy · DPA |
| Vercel | Hosts the site and API; cookieless page-view counts; brief server logs | Varies (edge network; typically US and EU) | Privacy · DPA |
| Fly.io | Server-side render worker for episode assembly | United Kingdom (London worker) | Privacy · DPA |
| Resend | Sign-in and account emails, the community email series with its unsubscribe link, and receiving what you forward to your own in.underway.life address | United States | Privacy · DPA |
| AgentMail | Our support inbox: receives the messages you send with the Help button, with your email address and the page you were on, so we can reply | United States | Privacy |
| Sentry | Error reports: what broke, where in the code, the browser or app version and the page; never recordings, screen replays, or the contents of episodes | Germany (EU region) | Privacy · DPA |
| ElevenLabs | Transcripts with word timings (Scribe), the main transcriber; receives that audio. It no longer speaks the interviewer's questions | United States | Privacy · DPA |
| Deepgram | Transcripts with word timings when the main transcriber is unavailable, and precise word timings for clips; receives that audio | United States | Privacy |
| Hume AI | A standby for the live co-host conversation, used only if the main provider is switched off; not in use since September 2026, and closing on 13 November 2026 | United States | Privacy · DPA |
| Google (Gemini API) | Describes a fragment or a moment when video understanding is switched on; receives that clip, and nothing is generated from it | United States | Privacy · DPA |
| Google Analytics | Only if you allow it in the bar on the public site: which pages are visited, from where, and the start of your free episodes. Nothing you record or write passes through it | United States | Privacy · DPA |
| X | Only if you allow it, and only when an X ads campaign is running: an advertising pixel and conversion events (a visit, a pricing or how-it-works view, starting free, and a hashed email when you create a free account). Nothing you record or write in the app passes through it | United States | Privacy |
| Meta | Only if you allow it in the bar on the public site: the Meta pixel records that a page was visited, including the free landing pages, so we can tell whether an ad on Facebook or Instagram brought you here. Nothing you record or write in the app passes through it | United States | Privacy |
| Cloudflare | Relays the live picture between your phone and your computer when the phone is the camera; nothing is stored | Global network | Privacy · DPA |
| Whop | Checkout, membership and optional Whop sign-in | United States | Privacy |
Only if you connect them
These are optional. Nothing is sent until you connect the tool, and disconnecting deletes the stored key. Meeting tools are context for the interview: other people’s voices never become footage. A local folder never leaves your machine, so it is not in this table.
| Vendor | Purpose | Location | Their terms |
|---|---|---|---|
| Google Calendar | Read-only titles and times, so the interview's questions know the day | Varies (typically US / EU) | Privacy |
| Google Drive | Read-only text of the files you pick, so the questions know what is in them and what changed | Varies (typically US / EU) | Privacy |
| GitHub | Read-only commits since your last episode | United States | Privacy |
| Fathom | Meeting transcripts you already recorded, as interview context | United States | Privacy · DPA |
| Fireflies | Meeting transcripts you already recorded, as interview context | United States | Privacy · DPA |
| Zoom | Your own cloud-recording transcripts, as interview context | United States | Privacy |
| YouTube | Upload an episode you chose to send to your own channel | Varies (typically US / EU) | Privacy |
| Your own LinkedIn account, authorized so an episode can go there | United States | Privacy | |
| TikTok | Posts an episode to your TikTok account when you press Post; sees the video, the caption and your username | United States (Singapore and the EU for some accounts) | Privacy |
| X (your account) | Posts the thread you confirm to your own X account. Sees that text and your handle. The app's credentials are underway's; your token is not shared with anyone else | United States | Privacy |
| Instagram (Meta) | Posts an episode to your Instagram professional account as a Reel when you press Post; sees the video, the caption and your username | United States | Privacy |
| Stripe | Your own payments as interview context, if you paste a key | Varies (typically US / EU) | Privacy · DPA |
| Linear | Issues you closed, as interview context | United States | Privacy |
| Plausible | Your site's visitors and pageviews, as interview context | European Union | Privacy |
| Shopify | Orders and products in your shop, as interview context | Canada and the United States | Privacy |
| Figma | Changes and comments in design files you name, as interview context | United States | Privacy |
| Patreon | New patrons, your posts and your patron count, as interview context | United States | Privacy |
| Gumroad | Your sales and products, as interview context | United States | Privacy |
| Squarespace | Orders and products in your Squarespace shop, as interview context | United States | Privacy |
| Printful | Orders made and shipped for your shop, as interview context | Latvia and the United States | Privacy |
| Upwork | Hours and memos logged on your contracts, read-only, as interview context | United States | Privacy |
| PostHog | Usage in a project you name, as interview context | Varies (the host you connect, typically US or EU) | Privacy |
| Vercel (your account) | Production deploys, as interview context | Varies (typically US / EU) | Privacy · DPA |
| Whop (your account) | Your community's payments and joins, as interview context | United States | Privacy |
What this list does not claim
We have not listed a signed data-processing agreement against each name. Some of these companies sit outside the UK; how that transfer is done is in the privacy policy.
Who we are
Personal Works Ltd (PERSONAL WORKS LTD), company number 14013912, registered in England and Wales. Questions: hello@underway.life.