Who processes data for Intspec, and where.
The service providers that process data on our behalf, what each receives, and where it runs. This list is part of the privacy policy.
Subprocessors Verified against the configuration, 2026-09-14
Cloudflare Serving the marketing site and its cookieless visit statistics (Web Analytics); protecting and routing both hosts (DNS, proxy)Request logs for both hosts; on the marketing site, page views with referrer, browser, country and timingsGlobal edge network
Railway Hosting of the application, the background worker and the databaseEverything the service stores; request logsEU West (Amsterdam, Netherlands)
Google (Gemini API) Reading product data out of fetched pages and imported text; answering assistant questionsA text digest of the supplier page, the text you import, your category names, the question you askGoogle's global infrastructure, outside the EEA
Zyte Rendering supplier pages that need a browserThe supplier page address you pasted, and the country to fetch it fromIreland; fetches run from a location matching the supplier
Resend Sending address-verification and password-reset email, and the waitlist noticeYour email address, the messageEU (Ireland)
Sentry (Functional Software, Inc.) Server error reportsTechnical error context; personal-data defaults switched offEU data region
GitHub Source code, automated tests, and nightly encrypted database backupsAn encrypted copy of the database, kept 14 days; the key is held offline by the operatorUnited States
Proton The support mailboxEmail you send to hello@intspec.studioSwitzerland
Creem Payments, invoices and VAT for paid plans (merchant of record), once paid plans openYour billing details and payment; we never see the cardTo be confirmed when appointed
Each provider is bound by a data processing agreement. Those outside the EEA are covered by the transfer safeguards named in the privacy policy.
Changes
When we add or replace a provider we update this page and the date above, and give signed-in users notice in the app at least 14 days before a new provider handles their data. If you object to a change, write to hello@intspec.studio; you can also delete your account before the change takes effect. The policy this list belongs to is at intspec.studio/privacy.