Subprocessors.
Last updated: October 8, 2026This page lists the third parties involved in running Floki Mail. It is referenced by our Privacy Policy and our Data Processing Addendum.
1. Subprocessors
These companies process personal data on our behalf to run the Service. They are used for every customer and are bound by contracts that limit their use of the data to providing services to us.
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Google LLC (Google Cloud) | Application hosting, database, storage | All Service data, including account data, encrypted credentials and synced mailbox data | United States |
| Stripe, Inc. | Payment processing and billing | Name, email address, billing details | United States |
| Migadu-Mail GmbH | Transactional email (sign-up and password reset) | Name, email address | Switzerland / EU |
2. Third-party AI providers you select
Floki's AI features (summaries, drafting and AI chat) are optional. They run on an AI provider you choose, using your own API key. Because you contract with the provider directly, these providers are not our subprocessors: your agreement with the provider governs how it handles data.
- No AI provider receives any data unless you add its API key and use an AI feature.
- Only the content needed for your request is sent, such as the email being summarized or replied to, or the messages and contacts the assistant retrieves to answer you.
- We support only providers whose API terms prohibit using submitted data to train their models. For Gemini, a paid (billing-enabled) API key is required, because the free tier may use data for training.
| Provider | Company | Data terms |
|---|---|---|
| Gemini | Google LLC | Gemini API terms |
| ChatGPT / OpenAI API | OpenAI, L.L.C. | OpenAI API data privacy |
| Claude | Anthropic, PBC | Anthropic commercial terms |
| Perplexity | Perplexity AI, Inc. | Perplexity privacy policy |
| Grok | X.AI LLC | xAI privacy policy |
3. Changes
We update this page before adding or replacing a subprocessor in section 1. Customers who have signed our Data Processing Addendum are notified at least 30 days in advance and may object as described in it. Providers in section 2 may be added at any time, since none of them receives data unless you select it.
4. Contact
Questions: privacy@flokimail.com.