Legal
Subprocessors
This page lists every vendor that processes data on our behalf, what each one does, and what data it touches. It is the same list our Privacy Policy commits to in section 6.1, kept current here as providers change.
We use a limited set of vendors under contract, each restricted to providing its service to us. We do not sell personal information, and no vendor on this list may use your data for its own purposes.
Current subprocessors
| Provider | Purpose | Data |
|---|---|---|
| Supabase (on AWS) | Database and file storage | Form submissions, uploaded documents, and letters written through a family's page (encrypted) |
| Resend | Transactional email and notifications, including the code that confirms a letter written through a family's page | Name, email |
| Vercel | Website hosting and cookieless, aggregate site analytics | De-identified usage data |
| Cloudflare (Turnstile) | Security verification on forms, under Cloudflare's Turnstile Privacy Addendum | Browser signals used to distinguish people from bots |
| Anthropic | Reading papers you choose to add in the LumenUs app, and reading each letter written through a family's page before it reaches the family, under its commercial terms and data processing addendum, with no training on your content | The image of each page you add and the details read from it; the words and any photograph of each letter, with the writer's name and how they knew the person. Deleted by Anthropic within 30 days |
How we manage this list
Every vendor signs a data processing agreement before any data flows. We review the list when a provider changes and update this page in the same change. If a future change would materially affect how your data is handled, we will update the Privacy Policy and, where the law requires, ask for your consent.
Contact
Questions about any vendor on this list: hello@lumenus.life.