Every third party that can hold or see your data, what it does, and what it receives. Complete, and kept current with the code.
A sub-processor is any company that can hold or process your data because we asked it to. This is the complete list. If a company isn't here, it doesn't receive anything of yours.
| Company | What it does | What it can see |
|---|---|---|
| Anthropic | The language model behind everything Lio reasons about | Your chats, project context, retrieved abstracts, and the text of materials you add |
| OpenAI | Text embeddings for search; voice transcription | Text to be embedded; the audio you record when using voice input |
| MongoDB | The database everything is stored in | All of your stored content |
| Vercel | Hosting for the app and the API | Request metadata and server logs; content in transit |
| Gumroad | Payments | Your purchase email. We never see card details — Gumroad handles those and we never receive them |
Anthropic and OpenAI are called with our own API keys. Under their standard commercial API terms, what we send is not used to train their models and is held only for a limited abuse-monitoring window — 30 days at the time of writing. We have not signed a zero-retention agreement with either; that gap is stated plainly on our Privacy page.
Google and GitHub, and only when you choose to sign in with them. They tell us your name, email address and profile picture. They never tell us your password, and we never ask for one.
Google is not an AI provider for Theioptera. It appears here and nowhere else.
These receive a short literature search phrase, sent anonymously from our server with no identifier of you or your account attached. They do not receive your project text, your chat history, or your materials.
Separately, if you add a material by URL, our server fetches that page. The site sees a request from us, not from you — no cookies, no referrer, nothing identifying you.
No analytics provider, no advertising network, no data broker, no session-replay tool, no CRM holding your research content. There is no analytics SDK in the product at all.
We will update this page before adding a sub-processor, not after. Questions, or a request to be notified of changes: yaraismail2611@gmail.com.