Terms, privacy and the rest of it

1. Current subprocessors

We use the following third-party services, which may receive or process your data:

• Clerk — Authentication, user identity management, and session handling. Clerk's own product telemetry is disabled in the desktop application.
• Stripe — Payment processing and subscription management. Checkout and plan management open in your own web browser, including from the desktop application.
• Convex — Cloud database for storing your account data and user-created content.
• Cloudflare — Website hosting, content delivery, security, and distribution of the desktop application and its updates.
• Resend — Delivery of our release-notes and product-update emails. It holds the addresses we send those emails to, stored as contacts: the ones submitted through the subscribe form on our changelog page, and those of account holders, whose name and account identifier are held alongside the address. Every one of those emails carries an unsubscribe link that lets you turn either kind off on its own, or stop all of them.
• Google Analytics — Website traffic analytics (marketing website only; not used in either application).
• PostHog — Product analytics (web and desktop applications). Session recording is not used in the desktop application.
• Sentry — Error monitoring and crash reporting. The desktop application reports to a separate Sentry project from the web application.
• OpenAI — AI processing for the Excel import feature. The contents of a workbook you upload are read by an OpenAI model to identify the harnesses, components, wiring and pin assignments to create in your project.
• OpenRouter — Routes the parts library's AI features to the underlying model providers, currently Google and OpenAI. It receives the manufacturer, part number and category of the part you are looking up, and, where you ask for a cleaned-up part image, the image you supplied or the one the search found.

These providers process your data in accordance with their own privacy policies and applicable data protection agreements. We do not sell, rent, or trade your personal information to any third parties.

2. What each provider processes

Each provider receives only the data it needs for its function. Clerk holds your email address and session data and returns a user identifier to us; we do not receive or store passwords. Stripe receives your payment details directly and we do not store full card details on our servers. Convex holds your account record and your User Content — the wiring harness designs, projects and parts libraries you create.

Cloudflare serves the website and the application and sees request metadata such as IP address. It also hosts the desktop application's installers and update manifests, so it sees the IP address, operating system and installed version of each device that checks for an update.

Google Analytics, PostHog and Sentry receive usage, device and error data as described in sections 1 and 2 of the Privacy Policy. Sentry receives error and crash reports from the desktop application in a separate project from the web application's, associated with your account where you are signed in.

Resend receives the email addresses we send those emails to, and nothing about your projects or your use of the application. From the subscribe form on our Changelog page it receives the address you type, the date you submitted it, and a fixed label identifying that it came from that form; submitting that form does not create an account. If you have an account, your email address is also held by Resend as a contact, together with the first and last name and the account identifier we hold for you, so that we can send you occasional product updates. That happens whether or not you have ever used the subscribe form, and it does not put you on the release-notes list. Those emails carry the same unsubscribe link and preference page as any other. Subscribing signs you up for our release notes. You will also get occasional product updates, unless you have already turned them off. The unsubscribe link on every one of them opens a preference page where you can turn either kind off on its own, or stop all of them.

The cookie banner on our website governs Google Analytics only. PostHog and Sentry run inside the web application at app.wiring.studio and inside the desktop application — separate from the website, and neither shows a banner of its own — so a choice made on the website does not switch them off. Our Cookie Notice sets out what the banner does reach.

Our AI features are optional, and none of them runs unless you start it. Excel import sends the contents of the workbook you upload to OpenAI, which reads it to build the harnesses, components and wiring in your project — so whatever that file happens to contain leaves our systems. In the parts library, the description lookup sends the manufacturer and part number you enter, and the image search sends those together with the category and runs a web search for that part number; both go through OpenRouter to Google and OpenAI models. Where you ask for a cleaned-up part image, the image itself goes through OpenRouter to a Google model, which returns the rendered version — whether you uploaded that image from your device, sent it from your phone, pasted its address, or accepted one the image search found. None of these features sends your wider project data, and we do not use your content to train any model.

3. Processing locations and transfers

WHY NOT SIA is based in Latvia (European Union). Your data may be transferred to and processed in countries outside the EEA where our third-party service providers operate, including the United States. When such transfers occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or the service provider's participation in recognized data protection frameworks.

4. Notice of changes

This page is the current record of the providers we use. When we add or replace a subprocessor, we update this list and revise the "Last updated" date shown on this page. Material changes are notified in the same way as changes to the Privacy Policy, described in section 11 of that document.

If you object to a new subprocessor, contact us at support@wiring.studio before the change takes effect and we will discuss the options available to you, which may include terminating your subscription.

5. Data processing agreement

If you use Wiring Studio to process personal data for which you are the controller — for example, data about your own employees or customers held inside a project — you may need a data processing agreement with us. Request one at support@wiring.studio and we will provide our standard terms.

The safeguards described above apply regardless of whether a separate agreement is in place.