Who processes data for Intspec, and where.
The service providers that process data on our behalf, what each receives, and where it runs. This list is part of the privacy policy.
Subprocessors Last reviewed 2026-11-06
Cloudflare Serving the marketing site and its cookieless visit statistics (Web Analytics), and protecting and routing both hosts (DNS, proxy)Request logs for both hosts, and on the marketing site page views with referrer, browser, country and timingsGlobal edge network
Railway Hosting of the application, the background worker and the databaseEverything the service stores, and request logsEU West (Amsterdam, Netherlands)
OpenRouter Passing text to the AI model that reads product data out of fetched pages and imported documents, sorts items into your categories, and understands assistant questionsA text digest of the supplier page, the text you import, your category names, the question you ask. Zero data retention and no training, under its Data Processing Agreement and on every requestEuropean Union. Requests go to an EU-only endpoint and the model runs on EU infrastructure. The operator, OpenRouter, Inc., is a US company bound by standard contractual clauses
Zyte Reading supplier pages a plain fetch cannot, after you press Extract, and the six-hourly check on shops that refused every fetchThe supplier page address, and the country to fetch it fromIreland, with fetches run from a location matching the supplier
Resend Sending address-verification, password-reset and password-changed email, share invites, and the waitlist notice and service alerts to our own mailboxesThe recipient's email address and the message. A share invite goes to the address you typed and carries your name, your address, the project's name and that person's link. A waitlist notice carries the visitor's address and what they enteredEU (Ireland)
Sentry (Functional Software, Inc.) Server error reportsTechnical error context, with personal-data defaults switched offEU data region
GitHub Source code, automated tests, and nightly encrypted database backupsAn encrypted copy of the database, kept 14 days. The key is held offline by the operatorUnited States
Proton The support mailboxEmail you send to hello@intspec.studio, and waitlist noticesSwitzerland
Creem Payments, invoices and VAT for paid plans (merchant of record), once paid plans openYour billing details and payment. We never see the cardEstonia (Armitage Labs OÜ, Tallinn)
Each provider is bound by a data processing agreement. Those outside the EEA are covered by the transfer safeguards named in the privacy policy.
Changes
When we add or replace a provider we update this page and the date above, and write to the address on your account at least 14 days before a new provider handles your data. If you object to a change, write to hello@intspec.studio. You can also delete your account before the change takes effect. The policy this list belongs to is at intspec.studio/privacy.