Current sub-processors
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Supabase (self-hosted) | Authentication, primary database, file storage | Account details, blog content, subscriber records, uploaded media | Infrastructure operated by us |
| Vercel | Application hosting, scheduled jobs, performance telemetry | Request metadata, aggregate performance metrics | United States / global edge |
| Anthropic | AI drafting, rewriting, SEO and naming suggestions | Prompt text, post content you submit to an AI action, business brief | United States |
| OpenAI | AI cover image generation | Image prompts you submit | United States |
| Google (Gemini API) | Text embeddings for related posts and internal linking | Post text at publish time | United States |
| Firecrawl | Scraping a website you nominate, for the business brief and brand matching | The public URL you supply and its public page content | United States |
| Resend | Transactional and newsletter email delivery | Subscriber email addresses, message content, delivery events | United States |
A note on the AI providers
Anthropic, OpenAI, Google and Firecrawl only receive data when you invoke a feature that needs them. A blog that never uses an AI action and never requests a business brief sends them nothing.
Providers you bring yourself
If you connect your own email provider account, mail for your blog is sent through your account under your contract with that provider, not ours. In that arrangement they are your processor rather than our sub-processor.
Changes to this list
We will update this page before a new sub-processor starts handling customer data, and the date at the top will change with it. If you have a signed data processing addendum with us and want advance notice by email, write to privacy@inkhost.app and we will add you to the notification list.