Sub-processors
The third-party providers that help us run Maffen — what each one does, the data it processes, and where it’s located. This list is the companion to our Privacy Policy and is kept current.
These are the third-party providers that help us run Maffen. A provider only receives data once the relevant feature is enabled for you. We don’t sell your data, and AI providers are instructed not to use your content to train their models.
| Provider | What it does | Data it handles | Location & safeguards |
|---|---|---|---|
| Application infrastructure & database | Hosts the app and the managed PostgreSQL database that stores your account. | Account, conversations, memories, reminders, usage records. | EU/EEA where possible. |
| Telegram (Telegram FZ-LLC) | Messaging platform, when you chat with Maffen on Telegram. | The messages you send and receive on Telegram. | United Arab Emirates · outside the EU/EEA. Prefer WhatsApp if every hop must stay in Europe. |
| WhatsApp (Meta Platforms Ireland Ltd.) | Messaging platform, when you chat with Maffen on WhatsApp. | The messages you send and receive on WhatsApp. | Ireland (EU/EEA); Meta may transfer outside the EU/EEA under its own safeguards. |
| MessageBird / Bird | Delivers one-time login codes by SMS. | Your phone number and the login code. | Amsterdam, Netherlands · EU-hosted. |
| Mistral AI | AI model provider; generates Maffen's replies on every tier and runs background tasks on paid plans. | Your messages and the context needed to answer them. | EU-hosted · not used to train models. |
| Nango (self-hosted) | Open-source OAuth/connection layer we run on our OWN infrastructure to broker connections to the third-party apps you link (no third-party aggregator involved). | The connection tokens (held by our self-hosted instance) plus the data you ask Maffen to read or act on. | Same as our application infrastructure · EU/EEA where possible. |
| Google — Calendar, Gmail & Drive (OAuth) | Access to the Google services you choose to connect. | Data from the specific services you connect, to fulfil your requests. | Global · SCCs. |
| Linkup | Web search provider behind Maffen’s look-it-up tool. | Your search query (never includes data from your connected accounts). | EU-hosted · zero-retention · not used to train models. |
| Stripe | Payment provider and merchant of record for subscriptions. | Billing details and card data — we never see or store full card numbers. | Global · SCCs. |
On paid plans, particularly demanding background jobs may be handled by additional specialist model providers. Any provider located outside the EU/EEA relies on Standard Contractual Clauses or an adequacy decision, and all AI providers are instructed not to train on your content.
EU Mode routes reasoning and assistant-data storage through EU-hosted providers (such as Mistral AI) wherever technically possible. It does not change where a messaging platform you choose operates — see the Telegram note above.
This page is the companion to our Privacy Policy. When we add, replace or remove a provider that processes personal data, we update this page and, for material changes, give notice through the service.
Questions about this document? Contact eliel.kaartemo@gmail.com.
A proactive AI agent that lives in your chat. Made in the EU.