Chat203 Subprocessors

Version 1.1 (2026-10-19). In effect.

Version: 1.1 (2026-10-19)

Subprocessor	Purpose	Data processed	Location
Supabase, Inc. (on Amazon Web Services)	Database, authentication, file storage, server functions	All account data, knowledge content, conversations, leads	United States (us-east-1, N. Virginia)
Anthropic, PBC	AI model that generates answers	Visitor messages (sensitive numbers masked first), photos and PDF documents a visitor attaches (for that one answer), relevant knowledge excerpts	United States
Cloudflare, Inc.	Widget delivery (CDN), website hosting, DNS, bot protection (Turnstile), text embeddings for search (Workers AI), nightly backup storage (R2)	Visitor IP address and browser information; visitor messages and business content turned into search vectors (not kept by Workers AI); encrypted nightly copies of all Chat203 data and uploaded files (R2)	Global edge network; backups in Eastern North America (R2 location "ENAM"; a placement hint, not a legal jurisdiction lock)
Stripe, Inc.	Subscription billing and payments	Business billing contact and payment details (never visitor data)	United States
Resend, Inc.	Account emails (sign-in links, invitations) and lead notifications	Recipient email address and the email content (may include lead details sent to the business)	United States
Google (Firebase Cloud Messaging): planned	Push notifications to the owner app	Notification text (e.g. "New chat from a visitor") and device tokens	United States