Lead Recovery DeskSubprocessors
Every provider that touches data, and what it gets.
This page will list each provider that handles data on the Desk's behalf, what it receives, where it runs, and how you are told before one is added. The data processing agreement's schedule applies until the wording here is approved.
Structure only. Policy wording pending approval.
This page shows what the subprocessor list will cover and the requirements it must meet. It is not the policy itself. The current privacy notice, terms and data processing agreement on the app remain the documents that apply.
Providers as stated in the current privacy notice
| Provider | Receives | Where |
|---|---|---|
| Fly.io | Hosts the application and customer databases; infrastructure snapshots | London deployment |
| Tigris or compatible S3 object storage | Compressed offsite database backups | Provider-controlled regions, as the notice states |
| Paddle | Account and payment details. Never uploaded lists | Paddle's own regions |
| Resend or a configured SMTP provider | Password resets and account notices | Provider's own regions |
| Anthropic | Column header labels only, only when deterministic mapping fails and the feature is on. Never contact rows | Provider's own regions |
| Customer-chosen senders | Messages you approve, when sending is live. Not part of the free preview | Your provider |
This site now serves its own fonts and loads nothing from any other host. Earlier versions loaded fonts from Google; that provider is no longer contacted by this site.
Requirements before this becomes policy
- In placeEvery provider named in the privacy notice appears here with what it receives.
- In placeNo third-party request from this site's pages.
- PendingBackup storage region stated precisely, not "provider-controlled".
- PendingThe app's own pages stop loading fonts from a third party, or that provider is added to the list.
- PendingChange-notice mechanism (14 days by account email, as the DPA states) implemented and tested.
- PendingAny scanning service added to the stack is listed before it handles a file.
Until then: data processing agreement, schedule 3.