Legal
Subprocessors
These are the third parties that process personal data for us. Each is bound by a contract limiting it to processing on our instructions, with appropriate transfer safeguards. This list is referenced by the Privacy Policy and the Data Processing Addendum.
1Current subprocessors
| Provider | What it does | What it receives | Where |
|---|---|---|---|
| Supabase | Database, authentication and file storage | Account data, charts and jobs, uploaded files, entity images, bug reports and their screenshots | United States / European Union |
| Netlify | Website and API hosting | All request data in transit, IP addresses, server logs | United States |
| Railway | Background worker that runs the chart pipeline | Job data, prompts and uploaded files while a job is running | United States |
| Anthropic | AI models for prompt interpretation, source routing, and reading data from uploaded images | Prompts, and uploaded CSV files and images for the job being run | United States |
| Stripe | Payment processing, subscription billing and tax calculation | Email address, billing address, payment details, transaction history | United States / European Union |
| Resend | Sending account emails, and the invitations, sign-in links and access requests for published charts | The recipient's email address and the message | United States |
| Optional sign-in with Google | Only for users who choose it: account identifier and email address | United States |
2Notice of changes
We will give at least 30 days' notice before adding a new subprocessor, to customers who have asked to be told. To subscribe to those notices, email privacy@chartforce.ai.
If you have a data processing agreement with us and reasonably object to a new subprocessor on data-protection grounds, tell us within the notice period and we will work to find an alternative. If we cannot, you may terminate the affected part of the service and receive a pro-rata refund of the unused period.