Third-Party Services & Subprocessors
Template: not legal advice. Have counsel review and adapt before offering a hosted service.
Weirling integrates the third-party services listed below to deliver content aggregation, AI-assisted summarization, newsletter processing, and subscription management. This page records what data each service receives, where processing occurs, and relevant terms.
Active Subprocessors
| Service | Purpose / Used for | Data sent | Location | Notes |
|---|---|---|---|---|
| Groq (Llama 3.3 70B / 3.1 8B) | Summarization, topic extraction | Article title + text | United States | Content policy prohibits certain content classes; the digest/summarization use is compliant. No cold email. Summaries are cached to limit calls. |
| OpenAI (optional fallback) | Summarization when OPENAI_FALLBACK_ENABLED=true | Article title + text | United States | Same content-policy considerations as Groq. Disabled by default. |
| Resend | Digest and account email delivery (hosted) | Recipient email + email content | United States | Transactional/user-requested email only: no cold or bulk marketing. Include a working unsubscribe (implemented) and, for bulk sending, a physical address and SPF/DKIM/DMARC on a sending subdomain. |
| Railway | Hosting the API, workers, database and cache (hosted) | All account and reading data stored by the service | United States | Infrastructure provider: processes data only to run the service. |
| Vercel | Serving the web app (hosted) | Request metadata (IP address, pages requested) | United States | No Vercel Analytics or Speed Insights: no third-party analytics run in the browser. |
| Lemon Squeezy / Paddle | Merchant of record & subscription billing (hosted) | Customer email, country, billing token | United States / UK | Merchant of record processes payment data directly; card details never touch Weirling servers. |
| Browserless / Chrome | Headless rendering of JS-heavy pages | Target URL | Operator host | Runs in the operator's own container. Fetching respects robots.txt and the honest-bot posture. |
Data Processing Addendum (DPA)
For business customers subject to GDPR or equivalent privacy regulations, a standard Data Processing Addendum based on our template (docs/DPA_TEMPLATE.md) is available upon request.
See also: Privacy policy · Terms of Service