# Subprocessors

> The companies that handle data for Super Artifacts: what each one does for us and what of yours it sees, from the database to the booking calendar.

The companies that run part of Super Artifacts for us, what each one does, and what of yours it sees. Last updated 21 October 2026.

## The list

| Vendor | What it does for us | What it sees |
| --- | --- | --- |
| Supabase | The database. | Your account record, your artifacts’ details and versions, the data visitors submit into your artifacts, comments, and messages sent through the contact form. |
| Vercel | Hosts superartifacts.app, the dashboard and this site. | Every request to superartifacts.app, including your IP address and browser, in request logs that expire within days. |
| Cloudflare | Serves artifacts on superart.page, stores their files, and runs DNS. | The files your artifacts are made of, and every request to them. A visitor’s IP address is turned into a one-way digest for view counts and is not stored. |
| WorkOS | Sign-in. | Your email address, your name, and your password or the account you sign in with. |
| Stripe | Billing. | Your card and billing details. We never see your card number. |
| Resend | Sends our email: sign-in, invitations and notifications. | The address each email goes to and what it says. |
| PostHog | Product analytics. | Pages viewed and clicks on superartifacts.app, and, for some sessions, a recording with what you type masked. When you are signed in, your account id, email and name. |
| Slack | Internal alerts and contact messages, for the team. | Contact form messages, marketplace templates sent for review, and a first name or workspace name when a workspace reaches a milestone. |
| Google | The booking calendar, only if you book a call. | The name, email and anything else you enter on the booking page. |

## When it changes

When a company is added or removed, this list changes and so does the date at the top. The [privacy page](https://pr-1478-stg.superartifacts.app/privacy.md) says what we collect and how to have it deleted. This page has not been reviewed by a lawyer.