The companies that process data on our behalf, and what each one holds.
Supabase runs our database and authentication, in Ohio. It holds member records, sign-in credentials and the waitlist.
Cloudflare serves these pages and manages the domain, from wherever is nearest to you. It sees the ordinary records a web request produces.
Resend sends our email, through Amazon Web Services in Northern Virginia. It sees the address a message goes to and whether it arrived.
HostPapa hosts our own mailboxes. It holds mail you send us and mail we send you from an address at this domain.
Twilio carries our text messages, in the United States. It sees the number a verification code goes to and whether it arrived. It is not used for anything else.
None of them may use what they process for their own purposes. None of them are paid in data, and none of them are advertising companies.
We use no advertising or customer-data platform, and there is no sixth name missing from this list.
When we add one, this page changes before the data moves, not after. If a new subprocessor would hold member records rather than infrastructure records, members are told directly.