Sub-processors
PHINEAS uses the following third-party services to operate. Vendors marked always are essential to the service; vendors marked optional only receive data if you accept the cookie banner.
| Vendor | Purpose | Data | Region | Consent |
|---|---|---|---|---|
| Google Firebase Authentication | Sign-in and identity | Email, Google profile (name, photo), authentication timestamps | Global | always |
| Google Cloud Firestore | Application data storage | Submitted text, analyses, account profile, activity logs | United States (configurable) | always |
| Google Generative AI (Gemini) | AI-powered text analysis and rewriting | Verbatim text you submit for analysis or rewriting | Global | always |
| Google reCAPTCHA Enterprise | Bot/fraud protection (Firebase App Check) | Browser/device fingerprint, IP address | Global | always |
| Vercel | Hosting, edge runtime, first-party analytics + Web Vitals | Request metadata, IP address, user agent, page-view counts | Global edge network | always |
| Cloudflare Web Analytics | Privacy-first first-party page-view + performance signal | Page URL, referrer, viewport size, anonymized IP. No cookies set. | Global | always |
| Google Analytics 4 | Product usage analytics | Anonymized usage events, IP-truncated location, device class | Global | optional |
| Microsoft Clarity | Session recordings and behavioral heatmaps | Masked session recordings, click/scroll patterns, viewport size | Global | optional |
We update this list before adding any new sub-processor. Material changes trigger a re-prompt of the cookie consent banner. For questions, contact support@phineas.app.