Subprocessors

Last updated August 2, 2026

Presagon is built on a small number of third-party providers. This page names all of them, says what each one does and what it can receive, and commits us to 30days' notice before the list changes.

1. What this page is

A subprocessor is a third party that processes data on our behalf so that Presagon can run. This page lists all of them. It is referenced by the Privacy Policy and forms the authorised subprocessor list for the purposes of the Data Processing Agreement.

Every provider below is engaged under a written agreement that binds it to process data only on our instructions, to keep it confidential, and to apply appropriate security measures. None of them is permitted to use the data for its own purposes, and none of them is an advertising network or a data broker.

2. Current subprocessors

Provider	Established in	What it does	What it can receive
Vercel Inc.	United States	Application hosting and delivery, and the cookieless site analytics described in the privacy policy.	Everything transiting the application, including account details and workspace content.
Supabase Inc.	United States	The managed PostgreSQL database the application stores its data in.	All stored data: account details, session records, workspace content, subscription status.
Anthropic PBC	United States	The Claude model that interprets observed changes and writes the briefs.	Competitor content collected from public pages, and the product description written by the workspace. No account details and no billing data.
Paddle.com Market Ltd	United Kingdom	Merchant of Record: takes the payment, handles tax, and issues refunds.	Billing details you enter at checkout, which go to Paddle directly and never reach our servers, plus the email address on the order.
Resend	United States	Delivery of transactional and notification email.	Recipient email address and the content of the message being sent.
Cloudflare, Inc.	United States	Browser rendering: fetches and renders the public competitor pages a workspace has asked us to monitor.	The addresses of the public pages being monitored. No account details and no personal data.
Discord Inc.	United States	Receives our internal operational alerts through a private channel we control.	Operational events such as a new signup, which can include the account holder's name and email address.
Healthchecks.io	United States	Receives heartbeat pings that tell us a scheduled job ran.	None. The pings carry no customer data.

"Established in" is where the provider is incorporated. It is not a guarantee of where a given record is physically stored, since these providers operate global infrastructure. International transfers, and the safeguards that apply to them, are covered in the Privacy Policy and in clause 9 of the Data Processing Agreement.

3. Changes to this list

Before we add a subprocessor that will process personal data, or replace one, we will update this page and give at least 30days' notice before the change takes effect. To receive that notice by email, write to hello@presagon.com and ask to be added to the subprocessor notification list.

If you have a reasonable, documented objection to a new subprocessor on data-protection grounds, tell us within the notice period and we will work with you to find an alternative. If we cannot, you may terminate the affected subscription and we will refund the unused remainder of your current period.

Removing a subprocessor, or a change that does not involve personal data, takes effect when published.

4. Third parties that are not subprocessors

If you connect Presagon to a tool of your own, such as a Slack or Discord workspace you control or an AI assistant you authorise through our Model Context Protocol endpoint, that tool is not our subprocessor. You are instructing us to send data to it, and it handles that data under its own terms rather than ours. The same applies to the public websites we fetch on your instruction; their operators are not our subprocessors.

5. Questions

Write to hello@presagon.com for details of a particular provider, a copy of the transfer mechanism that applies to it, or to be added to the notification list. Each provider publishes its own security and privacy documentation; we can point you to the relevant pages, for example Paddle's privacy notice for anything relating to a payment.