Legal
Subprocessors
Draft pending review. These are the third-party services Cairnflow relies on, and what each one actually handles. Naming a company without saying what it processes would tell you nothing useful about your exposure.
| Service | Used for | What it processes | Region |
|---|---|---|---|
| Render | Application hosting | Everything the app handles in transit: requests, session cookies, logs. | EU (Frankfurt) |
| Neon | Postgres database | All stored data — accounts, workspaces, campaigns, leads, billing records. | EU (London) |
| Supabase | Authentication | Email addresses and sign-in identity for magic-link and Google sign-in. | EU (Ireland) |
| OpenAI | AI product understanding and reply drafting | Campaign descriptions, website excerpts and public source text. Never credentials or billing details. | US |
| DeepSeek | AI lead scoring | Public source text and the campaign description used to score it. Never credentials or billing details. | China |
| Resend | Transactional email | Your email address and the contents of notifications, invitations and confirmations. | US (us-east-1) |
| Stripe | Payments and subscriptions | Billing email and payment details. Card numbers go to Stripe directly and are never held by Cairnflow. | US / EU |
| Sentry | Error monitoring | Error reports with sanitised context. Configured to exclude request bodies and secrets. | EU (Germany) |
| PostHog | Product analytics | Pseudonymous usage events — which features are used, not what you wrote. | EU Cloud |
| cron-job.org | Scheduled task trigger | Nothing. It calls one protected endpoint on a timer and receives only a status; no customer data is sent to it. | EU (Germany) |
Transfers outside the EU
Most of this list is EU-hosted. Four are not — OpenAI, DeepSeek, Resend and Stripe — so data handled by those services is processed outside the EU, under their standard data-processing terms.
- OpenAI (US) — Campaign descriptions, website excerpts and public source text. Never credentials or billing details.
- DeepSeek (China) — Public source text and the campaign description used to score it. Never credentials or billing details. There is no UK or EU adequacy decision for China, so this transfer relies on standard contractual clauses rather than an adequacy finding.
- Resend (US (us-east-1)) — Your email address and the contents of notifications, invitations and confirmations.
- Stripe (US / EU) — Billing email and payment details. Card numbers go to Stripe directly and are never held by Cairnflow.
Changes
Adding a subprocessor means updating this page. If you need advance notice of changes for your own compliance, email support@cairnflow.io and we will tell you before we add one.