Subprocessors
Current subprocessors
| Subprocessor | Function | What is shared | Location |
|---|---|---|---|
| Cloudflare, Inc. | Hosting, storage, server-side analytics, bot challenge. All Dark Orb data sits on Cloudflare infrastructure. | All service data, including account data, composed sites, and visitor form submissions | Global edge |
| Anthropic, PBC | AI composition, image-suitability screening, alt-text generation, logo analysis, answering the questions you ask about your customers | Your intent text and the content to be composed; image descriptions; a logo you upload for logo composition; when you ask a question about your customers or for a thread summary, the relevant enquiry text | US / EU |
| OpenAI, L.L.C. | AI image generation | Image-generation prompts derived from your composed content | US |
| Resend | Sending passwordless magic-link sign-in emails; delivering new-submission notifications for the forms on the sites you build; delivering the replies you send to your customers | Recipient email address and the sign-in link; for form notifications sent to you as the site owner, the visitor's submission content (name, email, message, and any custom fields); and, for replies you send, the customer's email address and your message | US |
| Pexels | Stock-image search | Search query; optional internal user identifier | US |
Visitor form-submission data, which we process as your processor under the Data Processing Agreement, is stored on Cloudflare and is emailed to you, the site owner, through Resend so you are notified of new submissions. When you reply to a customer from your portal, your reply is delivered to them through Resend. When you ask a question about your customers, or for a summary of a thread, and answering needs interpretation, the relevant enquiry text is sent to Anthropic; this happens only when you ask, never automatically. We do not send this data to OpenAI, Pexels, or any other subprocessor, and we do not use it for our own purposes.
Planned subprocessors (not yet in use)
These providers are integrated in the codebase but are not yet processing live personal data. They will move into the table above when they go live, with notice.
| Subprocessor | Function | When | Location |
|---|---|---|---|
| Stripe, Inc. | Subscription billing and payment processing | When paid plans launch | US / EU |
| Sentry (Functional Software, Inc.) | Error monitoring, minimised of personal data | When enabled | EU / US |
International transfers
Some subprocessors are based outside the UK. Where personal data is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. The specific mechanism cited per subprocessor is being confirmed with our solicitor and does not change the safeguards you are entitled to.
Staying informed of changes
This is the current set of subprocessors. We will give reasonable notice before adding a new subprocessor that handles personal data, by updating this page. If you want to be told of changes, email hello@danieltodd.uk asking to be added to subprocessor-change notifications.
← Back