Subprocessors

Current subprocessors

Enterprise security reviews usually ask for this list before they ask for the DPA, so it is published rather than sent on request. We give notice here before any addition takes effect.

• DeepInfra — model inference for prompt enhancement, content moderation, and transcription. Processes prompt content in transit only.
• Stripe — subscription billing and payment processing. Processes billing identity and payment details; we never see a card number.
• Zoho (Desk and CRM) — support tickets and sales enquiries. Processes the contact details and free text a user chooses to send us.
• Cloudflare — website delivery, edge security, Turnstile abuse prevention, and anonymous aggregate page-view counting.
• Google Cloud — application hosting, the control-plane database holding account, billing, team, and policy metadata, and storage for support screenshots.

What is deliberately absent

There is no analytics vendor, no session-replay tool, no advertising network, no customer-data platform, and no error-reporting service with access to form content. Each of those would be a new processor of personal data for no capability we need.

Questions

Write to privacy@promptgateways.com, or ask through the contact-sales form.