Sub-Processors
Last Updated: August 2026
IndexGPT is operated by Legendary Index, Lda. To deliver the App we engage the sub-processors below. Each is bound by a written contract that limits processing to our documented instructions, imposes confidentiality, and requires appropriate security measures. Where a sub-processor is located outside the European Economic Area, transfers are covered by the European Commission’s Standard Contractual Clauses.
We do not authorise any sub-processor to use merchant data to train models. We access AI providers through their business or API tiers, and select them on the basis that those terms exclude training on submitted content. See section 6 of our Privacy Policy.
Infrastructure
Where the App runs and where merchant data is stored.
| Sub-processor | Purpose | Data received | Region |
|---|---|---|---|
| Shopify | App platform, authentication, billing and store data access | Store identifiers, store owner contact details, subscription events | Global |
| Application hosting provider | Runs the App servers and background jobs | All data processed by the App in transit and at runtime | EU |
| Managed database provider | Stores App data at rest | Merchant account records, store settings, generated content, analysis results | EU |
AI providers
Engaged when a merchant runs a feature that generates content or analyses how AI systems describe their brand. None may train on submitted content.
| Sub-processor | Purpose | Data received | Region |
|---|---|---|---|
| OpenAI | Content generation and analysis | Store content, brand profile and prompts submitted for the requested feature | US |
| Anthropic | Content generation and analysis | Store content, brand profile and prompts submitted for the requested feature | US |
| Google (Gemini) | Content generation and analysis | Store content, brand profile and prompts submitted for the requested feature | US |
| Perplexity | Brand visibility and prompt tracking | Brand name, tracked prompts, competitor references | US |
| xAI (Grok) | Brand visibility and prompt tracking | Brand name, tracked prompts, competitor references | US |
Product analytics, communication and support
Support the operation of the service and our contact with merchants.
| Sub-processor | Purpose | Data received | Region |
|---|---|---|---|
| PostHog | Product analytics and error diagnosis | Pseudonymous usage events, technical metadata | EU |
| Loops | Lifecycle and transactional email to merchants | Store owner email address, store name, subscription status | US |
| Email delivery provider | Sends transactional email from the App | Recipient email address and message content | EU |
| Web3Forms | Delivers messages sent through the contact form on our website | Name, email address and message content you enter in the form | EU |
Changes to this list
We update this page whenever we add or replace a sub-processor. Merchants who have signed our Data Processing Agreement may ask to be notified in advance of changes by writing to hello@indexgpt.app, and may object to a new sub-processor on reasonable data-protection grounds as set out in that agreement.