Legal
Subprocessors
These are the third-party services that process data to run ArchOverflow. Per our Data Processing Addendum §5, account owners get email notice at least 30 days before a new or replacement subprocessor touches customer content, and this page is updated at the same time. The list is deliberately short.
| Provider | What it does | Data it processes | Location |
|---|---|---|---|
| Cloudflare, Inc. | Hosting, compute, database, file storage, backups, first-party analytics, and built-in model inference (Workers AI) | All service data: accounts, sessions, customer content, logs | United States / global edge network |
| Resend, Inc. | Transactional email (sign-in links, verification, account notices) | Email address, message content of the notices we send | United States |
AI providers
Current AI features run on Cloudflare Workers AI (covered above): content you submit to an AI feature is processed for inference only, inside our existing Cloudflare tenancy, and Cloudflare's terms do not permit training on customer content at any allocation level. Before any feature sends customer content to a frontier model provider (such as Anthropic or Google), that provider will be added to this table with 30 days' notice, under API terms where customer content is not used for model training. Our standing rule: customer content never touches any endpoint whose terms permit training on it — which rules out consumer free tiers (for example, the free Gemini tier) entirely.
Not subprocessors
No advertising, analytics, or tracking vendors exist on the Services — page counting is first-party on our own Cloudflare infrastructure. Payment processing (Stripe) will be added here before paid plans launch; card data will be handled by the processor's hosted pages and will never touch our systems.