A subprocessor is a company that handles customer or visitor data for AEO Corner so that we can run the service. The Data Processing Agreement and the Privacy Policy refer to this list.
Which companies handle data for us today?
These companies are connected to the software now, each for the purpose shown.
| Company | Purpose | Data involved | Where |
|---|---|---|---|
| Anthropic | Language model that reads AI answers, reads your site, drafts content and researches facts, and, where Claude is tracked as an engine, answers your tracked questions with web search | Answer text, brand details, page excerpts, content briefs, the tracked questions (when Claude is tracked) | United States |
| DataForSEO | Collects ChatGPT and Gemini answers | The questions we ask on your behalf | European Union / United States |
| Perplexity | Collects Perplexity answers | The questions we ask on your behalf | United States |
| SerpApi | Collects Google AI Overviews | The search queries we run on your behalf | United States |
| Google Analytics and Search Console, only if you connect them (read-only) | The traffic and search figures you authorise us to read | United States | |
| Wikimedia Foundation (Wikidata) | Looks up whether a public Wikidata item exists for your business (read-only, no account) | Your brand name and aliases, and the item number if you give one: public information only | United States |
| DigitalOcean | Hosting, managed database, queue store and file storage | All service data | United States |
| Cloudflare | DNS, network protection, staff sign-in protection and the bot check on the audit form | IP address, request metadata | United States / global network |
| Clerk | Sign-in and sessions | Name, email, sign-in details | United States |
| Stripe | Payments and billing | Payment and billing details (we never see card numbers) | United States / European Union |
| bKash | Payments in Bangladeshi taka | Payment amount and our invoice number (the customer signs in to bKash on bKash’s own page; we never see their number or PIN) | Bangladesh |
| Resend | Sending email | Email address, message content | United States |
| PostHog | Cookieless site analytics | Page views and referrer; no cookies or stored identifiers | United States |
| Slack | Internal alerts to our team (provider outages, spend caps), if configured | Organization names and technical details; no answers, no personal data beyond a name | United States |
Which backups are switched off?
These are prepared as backups but are not used. If we switch one on, it joins the list above and we tell customers first.
- OpenAI: Fallback collection of ChatGPT answers; switched off.
How do we tell you about changes?
We tell customers by email at least 30 days before a new subprocessor starts handling their data. A customer who objects on reasonable data-protection grounds can write to [privacy contact email] and we will work with them on an alternative or let them end the service with a refund of the unused period.