Legal
Subprocessors
Last updated on 2026-09-27. These companies process data for us so PoketProject can run. We add nothing to this list without 30 days' notice by email.
| Company | What it does for us | What it sees | When |
|---|---|---|---|
| Vercel | Runs the website and its API | Everything the website receives: accounts, docs, activity | Always |
| MongoDB Atlas | Stores the database | Accounts, sessions, workspaces, docs, versions, activity, key hashes | Always |
| Resend | Sends email | Your email address and the text of the email (confirmation, password reset, invitation) | When an email provider is connected |
| GitHub | Sign-in with GitHub | Your GitHub name and email address | Only when you choose to sign in with GitHub |
| Sign-in with Google | Your Google name and email address | Only when you choose to sign in with Google |
None of them sees your source code or a secret value, because PoketProject never receives those. AI agents you connect are not subprocessors: they run under your own account with the provider you chose, and PoketProject only answers their requests.
Placeholder: the owner must add the region of each provider (for example, United States or European Union) once hosting regions are chosen.
See also the privacy policy and the security page.