Template — needs legal review before launch.
Subprocessors
Last updated: 1 October 2026. We'll update this page before adding a new subprocessor.
- Vercel Inc. — purpose: Website hosting and functions; data: Request metadata, IP addresses in transit; location: EU/US (Data Privacy Framework).
- Managed PostgreSQL provider (e.g. Neon, Supabase or similar, EU region) — purpose: Database; data: All stored data; location: EU.
- Resend Inc. or Amazon Web Services (SES) — purpose: Sending email; data: Email address, email content; location: EU/US (Data Privacy Framework / SCCs).
- Anthropic PBC (or an OpenAI-compatible provider) — purpose: Writing summaries, ideas and newsletter drafts from public trend data; help assistant; data: Questions typed into free tools and the help assistant; no subscriber lists; location: US (SCCs).
- Lemon Squeezy (or Paddle), merchant of record — purpose: Sponsor checkout, invoices, VAT; data: Billing contact and payment details (held by the provider); location: US/EU.
- Inngest Inc. — purpose: Scheduling background jobs; data: Job metadata, no subscriber content; location: US (SCCs).
- Functional Software Inc. (Sentry) — purpose: Error monitoring; data: Error reports, may include IP address; location: EU/US (SCCs).
- Google LLC — purpose: "Continue with Google" sign-in; data: Name, email, profile picture; location: US (Data Privacy Framework).