Back to home
TRANSPARENCY

Service providers

PROVIDER LIST UPDATED 2026-08-13
Subscribe to changes

This page covers the Whisperstream Windows desktop application. It lists the service providers and other third-party recipients the app contacts, with a summary of each party's purpose, and records qualifying changes over time. Website checkout and hosting providers are covered separately by the Website Privacy Policy. The desktop Privacy Policy, Section 5, remains the authoritative source for this list.

ADVANCE NOTICE

Lanreal gives at least 30 days of advance notice before adding, removing, or replacing a listed provider or recipient, or materially changing its role or purpose, unless security, legal, or fraud-prevention reasons prevent advance notice. Corrective disclosures are published promptly. Notice is posted on this page and in the RSS feed.

Current providers and recipients

Polar Software Inc.Delaware, USA

license activation and Merchant of Record.

TRANSFER
Polar's Data Processing Addendum (at `https://polar.sh/legal/data-processing-addendum`), which forms part of the Polar Master Services Terms, designates Polar as the processor and incorporates the European Commission's Standard Contractual Clauses (Controller-to-Processor, Module 2) and the UK International Data Transfer Addendum as the mechanisms for transfers of personal information from the European Economic Area and the United Kingdom to the United States.
LINKS
Privacy policyData processing agreement
Cloudflare, Inc.Delaware, USA

model distribution and software updates.

TRANSFER
Cloudflare's GDPR transfer mechanism is the European Commission's Standard Contractual Clauses combined with EU-U.S.
LINKS
Privacy policy
Supabase, Inc.Delaware, USA

reviews and feedback database.

TRANSFER
Lanreal has executed Supabase's Data Processing Addendum (published at `https://supabase.com/legal/dpa`); the Standard Contractual Clauses (Controller-to-Processor, Module 2) incorporated into that Addendum are the transfer mechanism for personal information sent from the European Economic Area, the United Kingdom, and Switzerland to Supabase in the United States.
LINKS
Privacy policyData processing agreement
CORDNET OÜ (d/b/a Featurebase)Estonia

external feature-request board.

TRANSFER
Featurebase states that Customer Personal Data is primarily hosted in the European Economic Area and uses Standard Contractual Clauses, a UK Addendum, and a Swiss Addendum where an onward transfer requires them.
LINKS
help.featurebase.appPrivacy policy

How to object

Whisperstream does not create a Lanreal user account. If you do not accept a provider or recipient change, you may stop using the affected feature or uninstall the app. You may also contact us to exercise an applicable access, correction, deletion, portability, or objection right. Local app data is controlled from the app or Windows and is not deleted through this page. The available rights and request process are listed in Privacy Policy Section 10.

Privacy Policy, Section 10

2026-08-13Remove Hugging Face from runtime model delivery
Effective: immediately

Whisperstream removes Hugging Face, Inc. and Hugging Face SAS from the current desktop-app recipient list. Production model downloads now use only Lanreal's `models.whisperstream.io` endpoint on Cloudflare infrastructure. This change stops the app from sending model-download connection data to Hugging Face and does not add a recipient, expand Lanreal-side collection, or change the model licenses and upstream attributions. It takes effect immediately under the Privacy Policy's legal and security exception rather than after prospective notice. See Privacy Policy Sections 3.3, 3.7, 3.8, 5, 7, and 14 for the current disclosure.

2026-08-03Corrective Featurebase disclosure
Effective: immediately

Whisperstream adds CORDNET OÜ, which operates Featurebase, to the public provider list for the external feature-request board already linked from the Software. This entry corrects an omission in the initial provider inventory; it does not introduce new processing or change Featurebase's existing role. Because the board was already available before this disclosure, advance notice was not provided. The Software now identifies Featurebase before opening the external destination, and Privacy Policy version 1.4 describes the submitted data, roles, retention, and transfer safeguards. See Privacy Policy Section 5 for the complete disclosure.

2026-04-24Initial publication
Effective: immediately

Whisperstream publishes its third-party provider list for the first time. The initial public list identified four providers: Polar Software Inc. (license activation and Merchant of Record), Hugging Face, Inc. (one-time model download on first run), Cloudflare, Inc. (update and model-download hosting or fallback), and Supabase, Inc. (reviews and feedback database). This entry is a baseline, not a change. See Privacy Policy, Section 5, for data categories, roles, jurisdictions, and transfer information.

Full Privacy Policy

This page is a summary. For the complete statement, including data categories, lawful bases, transfer mechanisms, and your rights, see the Privacy Policy.

Section 5, Service Providers and Other RecipientsSection 14, Changes to this Policy