Sub-processors
The third parties that process customer data on MadMax's behalf, what each one receives, and where it runs.
Last updated: October 14, 2026
Outta Time Ventures LLC (doing business as MadMax) uses the sub-processors below to run the service. Each one receives only the data needed for its function and is bound by its own privacy and security terms; each name links to that provider's privacy policy. We review this list when a provider is added or replaced and update the date above.
Infrastructure
| Sub-processor | Purpose | Data it handles | Location |
|---|---|---|---|
| Railway Corporation | Application hosting, PostgreSQL database, object storage | All customer data at rest and in transit through the app | United States |
AI model access
| Sub-processor | Purpose | Data it handles | Location |
|---|---|---|---|
| OpenRouter, Inc. | Routes every MadMax-powered AI request (workflow building, agent steps, embeddings, web search) to the model provider | The prompt for that request: the user's instructions and whatever step input the workflow passes to the model | United States |
| OpenAI | Language and embedding models behind OpenRouter | Prompt content for requests routed to OpenAI models | United States |
| Anthropic | Language and vision models behind OpenRouter | Prompt content for requests routed to Anthropic models | United States |
| Exa | Web search behind OpenRouter's web plugin, when an agent step searches the web | The search query the model issues | United States |
Model providers are accessed under API terms that exclude training on customer content. MadMax never trains models on customer data, and nothing from a connected app such as Slack is used to train models.
Communications
| Sub-processor | Purpose | Data it handles | Location |
|---|---|---|---|
| Resend | Transactional email (sign-in codes, invitations, notifications) and inbound email triggers | Recipient address and message content for mail MadMax sends or receives | United States |
| Surge | SMS delivery for verification codes and SMS triggers | Phone number and message content | United States |
Billing
| Sub-processor | Purpose | Data it handles | Location |
|---|---|---|---|
| Polar Software Inc. | Merchant of record for paid plans and credit purchases | Name, email, billing details and payment method; MadMax never stores card numbers | United States |
Apps you connect
Services you connect yourself in Settings → Connectors (Slack, GitHub, Google, and the rest) are not sub-processors. Your workflows send data to them and read data from them only as you configure, and each connection can be removed at any time.
Questions
Email support@madmax.build. See the privacy policy for what we collect and how long we keep it.