Data Processing

This page describes how Organr processes data and which sub-processors are used.

Supabase (Supabase Inc., USA — database, authentication, and file storage. Data is stored in the EU region eu-central-1). OpenAI (OpenAI, L.L.C., USA — analysis of images, text, and speech in Calendr, Fridgr, Recipr, and Pantr. Content is processed to answer the request and is not stored by us afterwards). Vercel (Vercel Inc., USA — hosting, CDN, and edge functions for Organr and the website).

For data transfers to the USA, EU Standard Contractual Clauses (SCC) are used as the legal basis, in accordance with GDPR Chapter V.

User data is stored in the Supabase database (EU). AI requests are sent to OpenAI via Supabase Edge Functions. What is sent depends on the feature: photos of food and groceries, text you type or paste, voice recordings when you use speech, and family members’ first names for calendar parsing, so the right person is attached to the event. We never send email addresses, phone numbers, or login credentials. Static web pages are served via Vercel CDN.

Encrypted transmission (TLS/HTTPS), Row Level Security in the database, PIN-based authentication, and two-factor authentication for admin access.

Questions about this agreement or about the processing of personal data: privacy@organr.com.