All Fair Corporation
Service providers
The companies that help us run All Fair, what each one does, and the information it handles. We don’t sell your information to any of them; each works for us under its business terms. The Privacy Policy says how we use your information.
Running the app
| Provider | What it does | Information it handles | Where |
|---|---|---|---|
| Supabase, Inc. | The app’s database, sign-in and file storage. Encrypts stored data and backups at rest (AES-256); SOC 2 Type 2. | Everything in your account: profile, business and financial records, documents, conversations with the assistant | United States (AWS, us-east-1) |
| Amazon Web Services, Inc. | Runs the app’s servers (api.all-fair.com) and keeps server logs for 30 days. | Requests to the app and server logs, including IP addresses | United States (us-east-1) |
| Vercel Inc. | Hosts this website and the web app, and receives the app’s error reports. | Pages you request, IP address and browser details, error details | United States, with a global delivery network |
| Cloudflare, Inc. | Delivers a charting library (cdnjs) to your browser when the app draws a chart. | IP address and browser details | Global delivery network |
| Google LLC | Sign in with Google, if you choose it, and the fonts the app loads. | Your Google account name, email and profile picture if you sign in with Google; IP address and browser details for fonts | United States |
AI
| Provider | What it does | Information it handles | Where |
|---|---|---|---|
| Anthropic, PBC | Our primary AI model provider (Claude), for the assistant, document reading and insights. Under its commercial terms it doesn’t train on our data and deletes it within 30 days, unless it’s flagged for misuse or the law requires longer. | Your questions and the business information needed to answer them, including documents you upload | United States |
| OpenAI, L.L.C. | A backup AI provider, used only when the primary one is unavailable. Doesn’t train on API data; keeps abuse-monitoring logs up to 30 days. | The same as the primary provider, when it’s used | United States |
Payments, email and analytics
| Provider | What it does | Information it handles | Where |
|---|---|---|---|
| Stripe, Inc. | Subscriptions, payments and sales tax. | Billing contact and address, subscription details; card details you enter go straight to Stripe | United States |
| Resend, Inc. | Sends the app’s emails: sign-in codes, invitations and notifications. | Email address, name and the message | United States |
| PostHog, Inc. | Product analytics. In the app: pages and actions of signed-in users, and session recordings with all text and inputs masked, kept 30 days. On this website: only if you allow analytics, and never recordings. | Pages and actions, device and browser, approximate location from IP address, and email address for signed-in users | United States |
| Calendly, LLC | Meeting scheduling on our Contact page, when you choose to book. | Your name, email and the answers you give | United States |
Our team
| Provider | What it does | Information it handles | Where |
|---|---|---|---|
| Illuminating Impact LLC | The venture studio that founded All Fair. Hosts our all-fair.com email, manages our domain and servers, and provides technology and advisory support, on All Fair’s behalf. | Emails you send us; access to our systems only as needed to support them | United States |
Questions about a provider, or a request about your information: info@all-fair.com.