Current providers
Cloudflare
Service: Hosting, edge delivery, security
Purpose: Serve the application and protect service availability.
Data categories: request metadata, security logs, application content
Transfer safeguard: SCC/equivalent contractual safeguards where required
Status: active
Policy: https://www.cloudflare.com/privacypolicy/
Google
Service: User authentication
Purpose: Allow sign-in and account authentication.
Data categories: account identity, profile metadata, authentication tokens
Transfer safeguard: SCC/equivalent contractual safeguards where required
Status: active
Policy: https://policies.google.com/privacy
Polar
Service: Billing and subscription management
Purpose: Process paid plan checkout, renewals, and subscription events.
Data categories: billing identifiers, subscription status, transaction metadata
Transfer safeguard: SCC/equivalent contractual safeguards where required
Status: active
Policy: https://polar.sh/legal/privacy
MiniMax
Service: Policy analysis model inference
Purpose: Generate structured legal-document analysis outputs for submitted policy text.
Data categories: policy text extracts, analysis prompts, model output metadata
Transfer safeguard: SCC/equivalent contractual safeguards where required
Status: active
Policy: https://www.minimaxi.com/en/privacy-policy
GDPR Metrics
Service: Privacy-preserving analytics
Purpose: Measure aggregate product traffic when analytics consent is enabled.
Data categories: aggregate usage metrics, consented analytics events
Transfer safeguard: SCC/equivalent contractual safeguards where required
Status: active
Policy: https://gdprmetrics.com/privacy
Discord
Service: Optional user-configured webhook notifications
Purpose: Deliver watchlist event notifications to user-provided webhook endpoints.
Data categories: notification payload text, webhook delivery metadata
Transfer safeguard: User-configured destination; SCC/equivalent safeguards by provider terms
Status: optional
Policy: https://discord.com/privacy