Legal
Subprocessors
This page lists every vendor that processes data on our behalf, what each one does, and what data it touches. It is the same list our Privacy Policy commits to in section 6.1, kept current here as providers change.
We use a limited set of vendors under contract, each restricted to providing its service to us. We do not sell personal information, and no vendor on this list may use your data for its own purposes.
Current subprocessors
| Provider | Purpose | Data |
|---|---|---|
| Supabase (on AWS) | Database and file storage | Form submissions and uploaded documents (encrypted) |
| Resend | Transactional email and notifications | Name, email |
| Vercel | Website hosting and cookieless, aggregate site analytics | De-identified usage data |
| Cloudflare (Turnstile) | Security verification on forms, under Cloudflare's Turnstile Privacy Addendum | Browser signals used to distinguish people from bots |
How we manage this list
Every vendor signs a data processing agreement before any data flows. We review the list when a provider changes and update this page in the same change. If a future change would materially affect how your data is handled, we will update the Privacy Policy and, where the law requires, ask for your consent.
Contact
Questions about any vendor on this list: hello@lumenus.life.