1. What This Page Is
A subprocessor is a company we use to help operate Telemetry that may handle your information in the course of doing so. This page lists every one of them, what they do for us, and what information reaches them. It is the detailed version of Section 4.1 of our Privacy Policy, and it is maintained alongside the code so that it stays accurate rather than aspirational.
Every company listed here is bound by contract to keep your information confidential, to use it only to provide the service we engaged them for, and never to use it for their own purposes.
This page covers companies that process information on our behalf. It does not cover the banks, brokerages, and card issuers that you choose to connect, because those relationships are yours rather than ours. Section 5 explains that distinction.
2. Infrastructure
These providers run the software and store the data. Everything you keep in Telemetry lives here.
- Google Cloud Platform (Google LLC, United States), our hosting provider: application compute, the PostgreSQL database, encrypted secret storage, and application logs. This is where all of your account, transaction, and budget data is stored, in the us-central1 region
- Firebase Hosting (Google LLC, United States), which serves the Telemetry web application and our marketing website to your browser. It receives your IP address and standard request information
- Google Identity Platform, also called Firebase Authentication (Google LLC, United States), which manages sign-in. It holds your email address, your password credential, your two-factor enrollment, and your sign-in history. We never see or store your password
3. Features That Send Data To A Provider
These providers receive a specific slice of your information so that a specific feature can work. Each entry says what is sent and what is not.
- Google Cloud Vertex AI (Google LLC), which powers the Avi assistant and automatic transaction categorization. When you ask Avi a question, the information needed to answer it is sent to the model, which can include account names, balances, and transaction descriptions, amounts, and dates. Categorization sends transaction descriptions only. Under Google's Vertex AI terms this information is not used to train Google's models. Requests are served through Google's global endpoint, so processing may occur outside the United States
- SimpleFIN Bridge (United States), which connects to your banks and card issuers and returns balances and transactions when you link an account through it. We store the access credential it issues, encrypted, and never your banking username or password
- RentCast (United States), which estimates the market value of a property you add as an asset. It receives the street address you enter for that property, and nothing else. No account or transaction data is sent
- Loops (United States), which sends product and account emails. It receives your email address, your name, and your Telemetry user identifier so that we can reach you. No financial information is sent
- GitHub (Microsoft Corporation, United States), which hosts our private code repository. Our product backlog is stored there, and an item created from feedback you submit can contain the text you wrote. Your email address is deliberately excluded and never leaves our database
4. Website Analytics
Our marketing website uses one analytics provider. The Telemetry application itself uses none.
- Plausible Analytics (European Union), which gives us aggregate visit counts for our public website at telemetrywealth.com. Plausible sets no cookies, collects no personal information, and does not track visitors between websites. It is not used inside the Telemetry application at all
5. What Is Not On This List, And Why
Three kinds of company are deliberately absent, because none of them processes your information on our behalf.
- Institutions you connect directly. When you link a brokerage or a bank to Telemetry yourself, rather than through an aggregator, that institution is not our subprocessor. You authorize it to release your data to us, we hold the resulting authorization token, and information flows from them to us. We do not send them your information. Charles Schwab is available today as a connection of this kind
- Market data providers. The prices that value your holdings are requested by ticker symbol. Those requests carry nothing that identifies you, your accounts, or your positions
- Our DNS provider and domain registrar, Cloudflare. Our records resolve directly to our hosting provider without being proxied, so Cloudflare is not in the path of any request you make and no information passes through it
6. Planned Subprocessors
We list these in advance so that this page is never behind our roadmap. Neither is in use today, and neither receives any information until the feature it supports is live and you choose to use it.
- Plaid, for connecting bank and card accounts. Our production application was submitted on August 27, 2026 and is under review
- Stripe, for subscription payments. Telemetry is not currently billing, and no payment information has been collected
7. Changes To This List
We update this page when a subprocessor is added or removed. If we add one that will handle your financial or personal information, we will note it here before it goes into service, and we will tell you about material changes as described in Section 12 of our Privacy Policy.
8. Questions
Email: privacy@telemetrywealth.com
