Effective date: August 23, 2026
This page lists the third parties CrescendoLabs uses to provide the Services. It is incorporated into our Data Processing Addendum (§7). We update this page before adding or replacing a sub-processor and notify account owners by email; if you have a data-protection-based objection to a new sub-processor, contact privacy@crescendolabs.ai within 30 days of the notice (DPA §7).
All customer data is stored and processed in the United States.
These providers process customer data on CrescendoLabs' behalf, under written data-protection terms no less protective than our DPA. Our AI Service Providers are contractually restricted from using your data to train their models.
| Provider | Function | Data involved | Location |
|---|---|---|---|
| Google Cloud Platform (including Vertex AI — AI Service Provider) | Cloud infrastructure: application hosting, database, storage, messaging, logging, and all AI model serving. The AI models we use — Google Gemini, Anthropic Claude, and xAI Grok — are served within Google Cloud via Vertex AI; prompts and outputs are not used to train the providers' models. | Customer Data processed by the Services | United States |
| Google Firebase | User authentication, application hosting, real-time updates, and push-notification delivery | User identity (name, email), session-state updates streamed to your screen, minimal push-notification payloads (never business amounts or client names) | United States |
| Stripe | Payment and subscription billing for CrescendoLabs accounts | Your account billing information (email, tokenized payment method, subscription and usage records) — never your business or client data. Stripe also acts as an independent controller of payment information for its own fraud-prevention and regulatory obligations, under Stripe's privacy policy. | United States |
These are services you choose to connect to CAP under your own agreement with the provider. CrescendoLabs does not engage them to process data on its behalf — their availability and terms are governed by your agreement with them and our Terms of Service §9, and they are not Sub-processors under the DPA (§7). They are active only if you connect them.
| Provider | Function when connected |
|---|---|
| Plaid | Financial-account connections. Plaid is an independent controller of the information it collects in its own connection flow, under Plaid's end-user privacy policy. We receive tokenized access, balances, transactions, and at most masked account numbers — never your banking credentials. |
| Intuit QuickBooks Online | Accounting data synchronization |
| FreshBooks | Accounting data synchronization |
| Google Workspace | Your workspace's email, documents, calendar, and chat, per the OAuth scopes you grant |
| Microsoft 365 | Your mailbox and Teams messaging, if connected |
| Slack / Telegram | Notification and chat delivery to your own workspace or account |
Sub-processor questions and objections: privacy@crescendolabs.ai.