Skip to content
Subprocessors

Who handles your data, and why

The companies that run part of Super Artifacts for us, what each one does, and what of yours it sees. Last updated .

01

The list

SupabaseThe database.
Your account record, your artifacts’ details and versions, the data visitors submit into your artifacts, comments, and messages sent through the contact form.
VercelHosts superartifacts.app, the dashboard and this site.
Every request to superartifacts.app, including your IP address and browser, in request logs that expire within days.
CloudflareServes artifacts on superart.page, stores their files, and runs DNS.
The files your artifacts are made of, and every request to them. A visitor’s IP address is turned into a one-way digest for view counts and is not stored.
WorkOSSign-in.
Your email address, your name, and your password or the account you sign in with.
StripeBilling.
Your card and billing details. We never see your card number.
ResendSends our email: sign-in, invitations and notifications.
The address each email goes to and what it says.
PostHogProduct analytics.
Pages viewed and clicks on superartifacts.app, and, for some sessions, a recording with what you type masked. When you are signed in, your account id, email and name.
SlackInternal alerts and contact messages, for the team.
Contact form messages, marketplace templates sent for review, and a first name or workspace name when a workspace reaches a milestone.
GoogleThe booking calendar, only if you book a call.
The name, email and anything else you enter on the booking page.
02

When it changes

When a company is added or removed, this list changes and so does the date at the top. The privacy page says what we collect and how to have it deleted. This page has not been reviewed by a lawyer.