Effective October 14, 2026
Service providers & data flows
This inventory explains the services used by Latent Ape LLC, a Tennessee LLC, to operate Bookmarqer. A provider receives information when its associated feature is used. Business customers agree their authorized subprocessor schedule and any required transfer terms as part of their DPA.
| Provider | Purpose | Information involved |
|---|---|---|
| Cloudflare | Hosting, database, object storage, queues, logs and browser retrieval | Account identifiers, saved content, generated results, digests and operational metadata |
| Clerk | Authentication and account identity | Account/contact information, authentication/session information and security metadata |
| OpenRouter and OpenAI or Anthropic | AI summaries and image interpretation | Relevant URLs, extracted/shared text, images, notes, project descriptions and summaries |
| Jev / TypeSafe | Project classification and content scoring | Relevant content, summaries, project descriptions and notes for classification; content evidence for scoring |
| Resend (when email delivery is enabled) | Outbound weekly/project email | Recipient addresses, digest content and delivery metadata |
| Cloudflare Email Sending (previous integration) | Legacy send attempts | Recipient addresses and attempted digest content; historical records may remain |
Other external parties
X/Twitter and FxTwitter receive requests for public posts; original sites receive content-fetch requests. X embeds load external resources in your browser. These are not represented as contracted subprocessors. Apple and Google operate app distribution platforms, and any login providers you choose process authentication under their own terms.
Model routing
Bookmarqer sends summary and image requests through OpenRouter only to the OpenAI or Anthropic provider identified in the AI sharing screen. Silent fallback to other model hosts is disabled. TypeSafe (Jev) handles the disclosed categorization and scoring. Permission is required before processing, and changes to the model require renewed permission. These routing controls are not a promise of zero retention or a universal prohibition on provider training; provider terms and any separately agreed business restrictions apply.
Changes
This list will be updated as integrations change. Any notice and objection rights for business customers follow their executed DPA. Business notices are sent to the contact designated in the applicable agreement. Material changes to consumer AI disclosures require renewed permission before affected AI processing.