Legal
Who helps us run the service
These companies process personal data for us. We choose them, and they may use the data only to do this work for us, under a contract. See our Privacy policy for everything else.
Our processors
| Company | What it does for us | Which data | Where, and transfer safeguard |
|---|---|---|---|
| Cloudflare, Inc. | Runs the service, its database and its storage. Serves every website and connects domains. Counts page views. Checks forms with Turnstile. Counts visitor numbers for websites with a subscription that switch them on. Builds and photographs the drafts of the connector with Containers and Browser Rendering. Protects the administration pages with Cloudflare Access. | Account data, websites and their files, drafts, reports, early access requests, the record of our decisions, page view records (website, address and path of the page), visitors' internet addresses while serving pages, form checks | United States, with servers around the world. The database and the files of the websites are kept in Western Europe: the files under Cloudflare's European Union jurisdiction, which guarantees they stay in the Union, the database by a location preference that Cloudflare does not guarantee. The network that serves the pages, counts the visits and keeps the small address records works worldwide. Cloudflare is certified to the EU-US Data Privacy Framework, and its data processing addendum includes the European Commission's standard contractual clauses. |
| Clerk, Inc. | Accounts and signing in, including signing in with Apple or Google | Email address, name, sign-in identity, session data. We also ask Clerk for your first name by your email address, to greet you in our emails. | United States. Certified to the EU-US Data Privacy Framework; its data processing addendum includes the standard contractual clauses. |
| Cloudflare, Inc., through its email service | Sends our emails, and the contact messages of your websites | Email address and name of the recipient, the content of each email, and for contact messages the name, email address and message of the person who wrote | As above for Cloudflare. |
| Functional Software, Inc., through its Sentry service | Receives reports of errors in the service and in the application on your computer | Technical details of errors, the version of the application and your operating system. Set to send no personal data and no internet address, unless an error happens to contain some. | European Union, Sentry's EU region in Frankfurt, for the error data; the account and organisation settings stay in the United States. Certified to the EU-US Data Privacy Framework; its data processing addendum includes the standard contractual clauses. |
| GitHub, Inc. | Hosts the downloads and updates of the application | The internet address of the computer that downloads or checks for an update | United States. Certified to the EU-US Data Privacy Framework; its data protection agreement includes the standard contractual clauses. |
| Anthropic Ireland, Limited | Runs AI models for the cloud with our own assistant (early access) | What you write to our assistant and the content of your website | Data stored in the United States; its data processing addendum includes the standard contractual clauses. Inputs and outputs are deleted within 30 days, and are not used to train its models. We will ask for zero data retention before the cloud opens. |
| OpenAI Ireland Ltd | Runs AI models for the cloud with our own assistant (early access) | What you write to our assistant and the content of your website | Processed by OpenAI Ireland, with onward transfers to the United States under the standard contractual clauses. Abuse-monitoring logs are kept for up to 30 days; what we send is not used to train its models. We will ask for zero data retention before the cloud opens. |
Not our processors
These companies decide for themselves what they do with your data, under their own privacy policies.
| Company | Its role | What we give it |
|---|---|---|
| Polar Software, Inc. | Sells the subscriptions as merchant of record, and is responsible for your payment details | Your email address, your account number, the website concerned and, for tax purposes, your internet address at checkout; the page views beyond those included, per website |
| Anthropic and OpenAI, when you use your own Claude or ChatGPT | Provide Claude Code, ChatGPT (Codex) and the chats that use our connector, under your own agreement with them | Nothing from us. Your conversation goes from your computer or your chat to them. |
| Apple and Google | Let you sign in with your Apple or Google account, if you choose to | Nothing from us. You sign in with them directly. |
Changes to this list
We tell you by email at least 30 days before a processor is added or replaced. Questions about any of them go to hello@tsurito.com.
Last updated: 4 October 2026.