Legal
Subprocessors
The third-party companies that process customer personal data on behalf of Searchedly.
Last updated
Draft pending legal review
This document describes how Searchedly works today. It will be finalized after review by counsel.
These companies help us run Searchedly and may process personal data in Customer Data. Each one is bound by data protection terms at least as protective as our Data Processing Addendum.
Current subprocessors
| Subprocessor | What they do for us | Data involved | Location |
|---|---|---|---|
| Render | Hosting for our website, API, background jobs, database and cache | All Customer Data | United States (Virginia) |
| WorkOS | Sign-in, single sign-on and session management | Name, email, sign-in events, IP address and device | United States |
| Resend | Sending service emails (invitations, alerts) | Recipient email address and message content | United States |
| Sentry | Error monitoring | Technical error details; personal data is removed before sending where possible | United States |
| Cloudflare (R2 storage) | Storing saved copies of the public website pages we scan for you, as evidence for your company profile | Public web page content; not designed to include personal data | United States |
| Cloudflare (Turnstile) | Checking that free report requests come from a person, not a bot | Browser and device signals, IP address | Global network |
| OpenAI (API) | Summarizing your public website pages into company profile facts; we ask OpenAI not to store requests, and OpenAI does not train on API data by default | Public web page content; not designed to include personal data | United States |
| Stripe | Subscriptions, payments, invoices and tax calculation | Billing contact, address, plan, invoices and payment details (card details go directly to Stripe) | United States |
Planned
These will be added when the features that need them launch. We'll update this page and give at least 30 days' notice first.
| Subprocessor | What they'll do | Data involved | Location |
|---|---|---|---|
| DataForSEO | Sending the questions in AI visibility reports to AI assistants (ChatGPT, Claude, Gemini, Perplexity) through their official APIs and returning the answers | Questions about companies and products; not designed to include personal data | Estonia (company); team in Ukraine; servers include Germany |
| Perplexity (API) | Answering the questions in AI visibility reports with live web search | Questions about companies and products; not designed to include personal data | United States |
| OpenAI (API, for this purpose) | Answering the questions in AI visibility reports with web search; we ask OpenAI not to store requests | Questions about companies and products; not designed to include personal data | United States |
Changes
We give at least 30 days' notice of a new subprocessor by email to organization Owners and on this page, so you can review it and object. Questions: privacy@searchedly.com.