dusk bot
Subprocessors
Effective date: 12 November 2026. Last updated: 12 November 2026.
These are the service providers dusk bot uses to run its services, what each one does and what data it handles. Our privacy policy explains the data in more detail. A provider's company location does not establish where all of its processing occurs.
dusk bot is local-first. Your bots, chats, files, memory and settings stay on your own computer or server, unless you choose a dusk cloud desktop. None of the providers below receive your messages, prompts or files, except InstaBox, which hosts your dusk cloud desktop if you have one, and Composio, which carries the actions you ask connected apps to take.
Sub-processors
| Name | Purpose | Data involved | Location |
|---|---|---|---|
| Contabo GmbH | Hosting of the website, account service, link service and our database | Account records, service records, analytics records, error reports and access logs; sealed relay traffic it cannot read | European Union |
| Cloudflare, Inc. | Proxy and content delivery for dusk.bot, DNS, the connected-apps broker, the cloud desktops' public edge and forwarding of mail sent to dusk.bot addresses | Website and API traffic, including IP addresses; tool traffic and broker token hashes; cloud edge traffic; mail sent to dusk.bot addresses | Global network |
| InstaBox, on Amazon Web Services | dusk cloud desktops | Your hosted bots, chats, files and desktop data | United States (AWS us-west-2) |
| Brevo | Transactional email and the waitlist | Email address, sign-in codes, account and billing notice content, waitlist sign-ups | European Union |
| Composio | Connected-app tools and OAuth connections | OAuth connections and the request and response data of actions you ask connected apps to take | United States |
| Apple Push Notification service | Phone push delivery on iOS | Device push token, bot name and identifiers, never message text | United States and global |
| Firebase Cloud Messaging (Google) | Phone push delivery on Android | Device push token, bot name and identifiers, never message text | United States and global |
| Spaceship | Domain registrar for dusk.bot | Domain registration records, no user data | United States |
| Let's Encrypt | TLS certificates | Certificate information, no personal data | United States |
Independent providers
These providers are not our sub-processors. They act under their own terms and privacy policies:
| Name | Role | Data involved |
|---|---|---|
| Dodo Payments | Merchant of record for paid plans: payments, tax and invoices | Billing details, card data and transaction records. We never receive card numbers. |
| Google, Apple and X | Optional sign-in to your dusk bot account | Your account identifier and email address at that provider |
| Your AI providers | The AI engines you choose, such as Anthropic, OpenAI, Google or xAI | Your prompts and replies, sent directly from the machine running your bots under your own account |
Not used
We do not use third-party analytics, advertising networks or a third-party error tracking service. Product analytics and error reports stay in our own database.
Changes
When we add or replace a sub-processor, we update this page and its date. If you would like to be told about changes, email [email protected]. For questions about data processing agreements or transfer safeguards, also email [email protected].