| Provider | Purpose | Data involved |
|---|---|---|
| Cloudflare | Application hosting, queues, object storage, network security | Requests, operational logs, audit jobs, AI traces |
| Turso | Managed application database | Accounts, workspaces, report metadata, support and billing records |
| Stripe | Checkout, subscriptions, invoicing, fraud prevention | Contact and transaction information |
| Plunk | Transactional email delivery | Email address, name, and message content |
| OpenRouter and selected model providers | AI-assisted website analysis | Selected public webpage text, system prompts, model responses |
| Google Analytics 4 (optional) | Consented public-page analytics | First-party cookie IDs, public page paths and campaign labels. Advertising personalization disabled; no private pages, form contents or tokens. |
| Google Tag Manager (optional) | Loads configured advertising measurement tags with separate ad consent | Public-page events and product facts. Excluded from private, authentication and receipt pages. |
| LinkedIn (when configured) | Optional advertising measurement through Google Tag Manager | Public page visits, consented interactions and advertising cookie identifiers. |
| PostHog (optional) | Consented public-page analytics and masked session replay | Anonymous in-memory IDs, fixed page names, masked public DOM; configured US or EU region. No private app, report content or tokens. |
Provider locations and downstream AI model providers vary. We assess new providers before use and will update this page when a material subprocessor is added.