Subprocessors
Last reviewed: August 10, 2026. This list is not fixed: we update it whenever we add or remove a provider.
What is a subprocessor?
A subprocessor is an outside company we use to help run FlareSight. When you use the product, or when FlareSight looks up a business contact on your behalf, some of that information passes through one of these companies so it can do one specific job, like sending an email, taking a payment, or finding a work email address.
This page lists every company we currently use this way: what job it does for us, what information it receives, and which country processes that information. "Personal data" below means anything that can be tied to an identifiable person, whether that person is a FlareSight user or a founder or executive whose contact details appear in the product.
See our Privacy Policy for how and why we collect this information in the first place.
Services that handle your data as a FlareSight user
These companies see information about you: your account, your visit to the site, or your payment.
| Provider | What it does | What data it receives | Where it processes |
|---|---|---|---|
| Supabase | Runs your account and stores the product's data | Your email address and a scrambled (hashed) version of your password, or your Google account email and name if you sign in with Google. Also your watchlists and activity in the product, and any contact details you or other users have looked up. | Not yet confirmed |
| Vercel | Hosts flaresight.org and handles every page you load | Your device's IP address, technical logs of your requests, and page-speed measurements from your browser. | United States (our primary hosting region is San Francisco), delivered through a worldwide content network |
| Stripe | Processes your payments | Your email address and your payment card details, handled entirely by Stripe, we never see your card number. Also your subscription status. | United States |
| Resend | Sends every email FlareSight sends you | Your email address, your name, and the full content of the email. Also whether it was delivered, bounced, or marked as spam. | United States |
| Sentry | Tells us when something breaks in the app | Details about the error, information about your browser and device, and a recording of what was on your screen in the moments around the error. | United States |
| PostHog | Helps us understand how people use FlareSight | Your account ID, your email address and plan, and which pages and features you use. | United States |
| Measures site traffic, and lets you sign in with "Continue with Google" | For analytics: your IP address, the pages you view, and identifiers from Google's own cookies. For sign-in: your Google account email address and name. | United States, and other countries as part of Google's global infrastructure | |
| Meta | Measures whether our Facebook and Instagram ads are working | Which pages you visited and when, and cookie identifiers used to recognize your browser. | United States, and other countries as part of Meta's global infrastructure |
| Measures whether our LinkedIn ads are working | Which pages you visited and when, and cookie identifiers used to recognize your browser. | United States, and other countries as part of LinkedIn's global infrastructure | |
| X | Measures whether our X ads are working | Which pages you visited and when, and cookie identifiers used to recognize your browser. | United States, and other countries as part of X's global infrastructure |
| Anthropic (Claude) | Drafts an outreach email when you click "Generate opener" for a contact | The contact's first name and job title, the company's name and basic facts (city, sector, funding stage and amount), and your own profile bio text. The draft is shown only to you; nothing is sent automatically. | United States |
| Upstash | Slows down abuse of the product (rate limiting) | Your account ID or IP address, used only as a counter. | Not yet confirmed |
| Slack | Sends our team an internal alert when someone cancels | The reason you gave for cancelling, any note you left, and your subscription reference. For our internal team only; Slack never contacts you. | United States |
Services we use to research companies and find contact details
FlareSight is built on public SEC filings. When our data pipeline researches a company, or a user asks to "reveal" a contact, these companies help find and check that information. Most of the people involved here have never signed up for FlareSight.
| Provider | What it does | What data it receives | Where it processes |
|---|---|---|---|
| Anthropic (Claude) | Writes short company descriptions and fills in missing company facts for our database | The company's name and text copied from the company's own public website. No names of people, no contact details. | United States |
| Perplexity | Researches missing facts about a company, such as its website, sector, or investors | The company's name and website. No names of people, no contact details. | United States |
| Hunter | Looks up a business email address when a user asks us to "reveal" a contact | The contact's first and last name and the company's website domain, and sometimes the company's name. | Not yet confirmed |
| Findymail | A backup lookup we use when Hunter cannot find a business email address | The contact's full name and the company's website domain. | Not yet confirmed |
| NeverBounce | Checks that a found email address actually works, before we show it to you | The email address being checked. | United States |
| Serper | Searches Google to find a company's own website | The company's name and city. No names of people. | Not yet confirmed |
| Apollo | Adds background facts about a company to our database | The company's name only. | United States |
| Clearbit | Finds a company's logo | The company's website domain only. | United States |
A tool we use that never sees personal data
We also use Replicateto generate marketing images, for example blog and social graphics, from text prompts we write ourselves. It receives only that text prompt: nothing about you, nothing about any company or contact, and no personal data of any kind. We list it here for completeness, not because it processes anyone's data.