{"lastUpdated":"2026-06-22","subprocessors":[{"vendor":"Supabase","purpose":"Database, authentication, file storage","data":"Account & application data","region":"EU (AWS eu-west-1)","dpa":true,"added":"2026-06"},{"vendor":"Cloudflare","purpose":"CDN, edge compute, DNS, WAF","data":"Request metadata in transit","region":"Global edge (EU-served)","dpa":true,"added":"2026-06"},{"vendor":"Stripe","purpose":"Payment processing","data":"Billing details (card data not stored by us)","region":"EU / US (DPF, SCCs)","dpa":true,"added":"2026-06"},{"vendor":"Resend","purpose":"Transactional & lifecycle email","data":"Name, email, message content","region":"EU / US (SCCs)","dpa":true,"added":"2026-06"},{"vendor":"AI model providers (Anthropic, Google)","purpose":"Club AI features (matching, assistant)","data":"Prompts — never used to train models","region":"EU / US (SCCs)","dpa":true,"added":"2026-06"},{"vendor":"PostHog","purpose":"Product analytics — consent-gated, off by default","data":"Anonymised usage events","region":"EU","dpa":true,"added":"2026-06"}]}