Meet Eden: see what AI says about your brand.

PromptEden LogoPromptEden

Legal

Subprocessors

Last updated

Yulan Ventures, LLC, doing business as PromptEden ("PromptEden," "we," "us") uses the following third-party subprocessors to deliver, secure, and improve our AI agent for AEO: research, content generation, publishing, and AI search visibility monitoring. We update this page when subprocessors are added or removed. If you have a Data Processing Agreement (DPA) with us that includes subprocessor change notifications, we will notify you per the terms of that agreement.

Providers listed here may support our own controller activities or processing on behalf of Customers. A provider is a Subprocessor under our DPA only to the extent it processes Personal Data on behalf of a Customer.

The Location column lists company locations and, where verified, processing regions. A company location alone does not establish where data is processed.

We transmit prompt content, workspace content you provide or approve for research and content generation, locale hints, and model parameters. We never transmit account credentials or billing data to AI model providers.

Infrastructure and Operations

SubprocessorPurposeLocation
Hetzner Online GmbHServer hosting for the application, its PostgreSQL database, and background jobsGermany (company and processing; Falkenstein, fsn1)
Stripe, Inc.Payment processingUnited States (company)
Resend (Plus Five Five, Inc.)Transactional and lifecycle emailUnited States (company; processing region unverified)
Functional Software, Inc. (Sentry)Error monitoringUnited States (company and processing)
PostHog, Inc.Product analytics. PostHog (US) receives Eden chat outputs and prompts and outputs from content generation, linked to user and team identifiers, to monitor answer quality; they are kept under PostHog's standard retention.United States (company and processing)
Plausible Insights OÜCookieless website analyticsEstonia (company)
Google LLC (Google OAuth and Google Ads)Account authentication and favicon lookup; Google Ads conversion tracking, only after marketing consentUnited States (company)
Meta Platforms, Inc.Meta Pixel: conversion measurement and ad click linking, only after marketing consentUnited States (company)
Cloudflare, Inc.DNS, network delivery and protection, TLS, bot protection, and object storage (content images and backups)United States (company); global network; R2 storage region unverified
GitHub, Inc.Customer-connected repository integration and content deliveryUnited States (company)

AI Model Providers

Configured models for research, monitoring, and content generation include models developed by OpenAI, Anthropic, Google (Gemini and Gemma), DeepSeek, Zhipu (GLM), Mistral, Meta (Llama), Perplexity, and xAI (Grok). For models configured through OpenRouter, processing is performed by OpenRouter and its upstream providers, which may act as sub-subprocessors. Direct provider integrations are listed below. A model developer may differ from the provider hosting it.

SubprocessorPurposeData processedLocation
Anthropic PBCAI agent reasoning, research, and content generation (Eden); monitoring analysisPrompts, workspace content, brand-voice materials, draft content, model parametersUnited States (company)
OpenRouter, Inc.AI model routing for agent research and content generation, monitoring queries, and analysis; upstream processing providers may act as sub-subprocessorsPrompts, workspace content, brand-voice materials, drafts, monitoring queries and responses, model parametersUnited States (company; downstream processing locations may vary)
TypeSafe AI, Inc.Optional shadow evaluation via OpenRouter, off by default, that receives anonymized, typed account metrics (counts and labels only; no names, content, prompts, websites or contact data) for comparison with the application's email-insight decisions.Anonymized typed account metrics (counts and labels only)United States (company)
OpenAIAI visibility monitoring via the direct OpenAI API, content generation, and article image generationPrompt content, workspace and brand materials, drafts, locale hints, image prompts, model parametersUnited States (company; processing region unverified)
Google LLC (Gemini)AI visibility monitoring queries via the direct Gemini APIPrompt content, locale hints, model parametersUnited States (company; processing region unverified)
Perplexity AI, Inc.AI visibility monitoring queries (direct integration currently disabled)Prompt content, locale hints, model parametersUnited States (company; processing region unverified)
Microsoft Corp. (Azure AI and Bing)AI visibility monitoring queries with Bing groundingPrompt content, locale hints, model parametersUnited States (company)
Features & Labels, Inc. (fal)Article image generationImage prompts derived from customer content; generation parametersUnited States (company)

Data Enrichment

SubprocessorPurposeData processedLocation
DataForSEO OÜSERP, backlink, and search-volume enrichmentMonitored domains, brand terms, keywordsEstonia / Ukraine (company)
Exa Labs, Inc.Web search for agent research and content strategySearch queries and domain filtersUnited States (company)
SerpApi, LLCGoogle search results and AI Overview retrievalMonitoring prompts and search queries, language and country hintsUnited States (company)
Google LLC (Search Console)Site-property verification and search-performance analyticsGoogle account authorization, site property URLs, and per-page daily clicks, impressions, and positionsUnited States (company)
Google LLC (YouTube Data API)Cited-video metadata lookupCited video IDsUnited States (company)
Reddit, Inc.Cited-post, community, and public-profile metadata lookupCited post IDs, usernames, and subreddit namesUnited States (company)
IndexNow (Microsoft Corp. and participating search engines)Search-index notification after content is publishedPublished content URLs and their host nameUnited States (company); global

Changes to This List

We may update this subprocessor list from time to time as we add or change service providers. Material changes will be reflected on this page with an updated date. If you have a DPA with us, we will provide notice per its terms.

Questions

For questions about our subprocessors or data processing practices, contact [email protected].