Current sub-processors
Supabase
- Purpose
- Authentication and database hosting
- Data categories
- Account email, hashed password, organization name, brand kit content, generated letters and templates, usage metadata
- Processing location
- United States
Anthropic (Claude)
- Purpose
- AI inference — generates communications from your brand kit and campaign inputs
- Data categories
- Brand kit content, campaign prompts, organization name. No donor data.
- Processing location
- United States
Stripe
- Purpose
- Payment processing and subscription management
- Data categories
- Billing email, cardholder name, card details (handled by Stripe — we never see the full card number), subscription status, transaction history
- Processing location
- United States
Vercel
- Purpose
- Application hosting and delivery
- Data categories
- Request logs, IP addresses, standard HTTP headers. No account content persists at this layer.
- Processing location
- United States (multi-region edge)
Google (Analytics 4)
- Purpose
- Website analytics for the public marketing site
- Data categories
- Pseudonymous visitor identifier, pages viewed, referral source, device class. No account-holder or donor data.
- Processing location
- United States
Sentry
- Purpose
- Server-side error monitoring
- Data categories
- Stack traces, error messages, scrubbed error metadata. Request bodies, email addresses, and IP addresses are scrubbed before events are sent.
- Processing location
- United States
How we notify you about changes
When we add a new sub-processor that materially expands the data we share with a third party, we will email account holders at least 14 days before the change takes effect and update the "Last updated" date at the top of this page. Internal replacements that do not change the categories of data processed (for example, moving from one hosting region to another within the same provider) are reflected here but do not trigger an email.
If you'd like to be notified every time this page changes, even for minor updates, email [email protected] and we'll add you to the watch list.
Questions
For questions about any of the sub-processors above, or to request a copy of our standard data-processing terms, email [email protected]. Our full Privacy Policy and Security pages have more detail on how we handle data.