Vendors and subprocessors — LeafProton
List in force · Published at leafproton.com/en/legal/subprocessors/
This list forms part of the Privacy Policy (section 9) and of Annex I of the Terms of Service. It is updated here, without changing those documents.
How we announce changes: adding or replacing a sub-processor that processes customer data is published on this page 30 (thirty) days in advance, and communicated by email to account holders. A customer who objects, for a justified data protection reason, may terminate at no cost before the change takes effect. The website vendors, below, do not process customer data and are updated here when they change.
Vendors in use
| Vendor | Category | For what | Data involved | Where it processes |
|---|---|---|---|---|
| Amazon Web Services (AWS) | Cloud infrastructure | Hosting, database, file storage, email sending, content delivery and technical records | 5.1 to 5.8 of the Policy | United States (us-east-1) |
| Cloudflare | Anti-bot protection | Anti-bot challenge on the sign-in and sign-up screens | IP address, browser signals | United States and global network |
| Identity provider | "Sign in with Google" (Google Identity Services) | Account identifier and confirmed email | United States | |
| Anthropic | AI models | Spreadsheet assistant, generation of forms and flows, analyses | Content sent to the AI feature and the conversation | United States |
| DeepSeek | AI models | The same features, when it is the vendor configured for the space | Content sent to the AI feature and the conversation | China |
| Stripe | Payments | Payment processing, subscriptions and issuing charges | Billing data (5.6 of the Policy) | United States and European Union |
Production environment: Amazon Web Services (AWS).
Website vendors
| Vendor | Category | For what | Data involved | Where it processes |
|---|---|---|---|---|
| Google (Google Analytics) | Visit measurement | Count visits to leafproton.com; with cookies, only with the visitor's consent | With acceptance: random browser identifier, pages viewed, where the visit came from, device and approximate region. Without acceptance: only cookieless, identifier-free signals, for aggregate estimates | United States |
| Google (Google Ads) | Conversion measurement | Know whether the visit to leafproton.com came from one of our ads; with cookies, only with the visitor's consent. No personalized ads and no remarketing | With acceptance: browser conversion markers. With or without acceptance: the ad click identifier, when the visit came from an ad | United States |
About the AI model vendors
They only receive data when someone uses an AI feature, and receive only what is necessary for the task — the file sent to the assistant and the conversation. No AI feature is run on the content on our initiative, and the rest of the product — forms, responses, flows and dashboards — works without sending anything to them.
Which of the two serves each space is our operational decision, and it may change. That is why both are listed: whoever needs to know where the content may go has the answer here, without depending on which one is configured today.
We do not use customers' content to train AI models, and we engage these vendors under a commitment not to use it for training.
Whoever does not want that transmission should stop using the AI features.
International transfer
Processing takes place in more than one country, as the "where it processes" column shows. Depending on where the data subject is, this constitutes an international transfer, relying on the mechanisms admitted by the legislation applicable to them: standard contractual clauses, adequacy decisions for the destination country, equivalent contractual safeguards, or the necessity of the transfer to perform the requested contract.
Languages
This list may be published in several languages. The official version is the one published in Portuguese, at leafproton.com/pt/legal/subprocessadores/; the others are courtesy translations and, in case of divergence of interpretation, the official version prevails.
History
| Change |
|---|
| Initial publication. |
| Website visit measurement in a list of its own; prior notice limited to sub-processors of customer data. |
| Google Ads (conversion measurement) among the website vendors; cookieless signals to Google before acceptance. |