Subprocessors

Stripe, Inc. — payments, Checkout, Billing Portal. Receives name, email, payment method (entered with Stripe), billing metadata. Card numbers never touch Etch servers.
Amplitude, Inc. — product analytics in the desktop app (opt-out in Settings) and, when configured, on this website (not loaded under Do Not Track or Global Privacy Control). Pseudonymous events and coarse device or page properties only.
Google LLC (Workspace SMTP) — transactional email (verification, password reset, invites, beta waitlist).

Self-hosted (not third-party SaaS)

Sync API, Postgres, y-sweet multiplayer, GlitchTip crash reporting, and this marketing site run on infrastructure operated by Informal Content Agency in the United States.

Hosted and customer-directed AI providers

When a workspace uses Etch-managed AI, the prompt, selected project context or media, generation settings, and job identifiers are sent to the disclosed processor for that modality solely to perform the customer-directed request. Image and video generation is routed through fal. Hosted text is routed through OpenRouter. The concrete route is recorded with the job.

Inline generated images may be stored in protected Etch workspace media storage for authenticated retrieval. They remain private to the generation job and are not automatically published through workspace sync or imported into a project. Etch stores the provider-hosted retrieval reference with the job until the output is downloaded into that storage. fal generation is not eligible for Zero Data Retention. Informal intends to request fal Store-IO:0 (no dashboard payload retention) and a 3600-second object lifecycle on submit; until that configuration is live, fal’s defaults apply — request payloads retained about 30 days in fal’s dashboard, generated media on fal CDN URLs without a guaranteed expiry. Save generated media you need.

fal — Features & Labels, Inc. (fal.ai) — generative-media routing subprocessor for Etch-managed image and video. San Francisco, California, United States. fal runs or brokers the listed model families (including ByteDance, Kuaishou, MiniMax, Black Forest Labs, Google, Alibaba, Krea, and Recraft) to perform the customer-directed request. fal’s Data Processing Agreement is available from fal’s trust center; fal’s own subprocessor list (14 entries, all United States) is at trust.fal.ai/subprocessors.
OpenRouter — model routing and usage settlement for hosted text routes only. It is not the processor for Etch-managed image or video generation.
OpenAI, Anthropic, Google, xAI, Moonshot AI, and Z.ai — text or reasoning inference when selected on a hosted text route.

Which legal entity performs inference for a given model family (including Veo and Sora) and in which region is unverified until fal replies in writing. Informal does not claim a region or inference entity for those routes.

Personal BYOK requests go directly from the customer’s client to the provider they configure and do not use Etch-managed credentials. Approved workspace keys are encrypted at rest and decrypted only for authorized requests. BYOK on Free covers hosted chat; image and video generation is Etch-managed on paid plans.

Higgsfield Cloud is gated and not an automatic provider. Soul ID, Cinema Studio, DOP, lip-sync, and related workflows remain opt-in until Informal validates the Cloud credential, application catalog, exact pricing, API-specific content-use terms, and any required data-processing agreement. It will be added to the active list before customer content is routed there by default.

Change process

We update this page and the repository list when material subprocessors change. Business customers may request notice at the legal contact on the Privacy Policy. Vendor DPAs are executed where required (counsel / ops residual for countersignatures).