Subprocessors
Last updated: October 10, 2026
These are the companies that process personal data for canvasletter (run by Cypress Technologies LLC), what they do and where. Each one works under a contract that limits it to our instructions. See our privacy policy for how we use data.
AI
- Anthropic · Runs the AI that designs and edits your issues. Receives the text, brand kit and instruction for each request, and doesn't train on API data. · United States
Hosting and infrastructure
- Vercel · Hosts the website and app; cookieless visit analytics and speed measurement. · United States
- Neon · Database for accounts and workspace content. · United States
- Cloudflare · Image and file storage (R2), DNS, email forwarding and form protection (Turnstile). · Global, with storage in the United States
- Inngest · Runs background jobs, such as finding photos. Receives IDs, not your content. · United States
- Upstash · Rate-limit counters. · United States
- Sentry · Error tracking, with your user ID when something breaks. · United States
- GitHub · Code hosting and automated checks. · United States
Email, sign-in and payments
- Resend · Sends account email: verification, password resets, test sends and receipts. · United States
- Google · Sign-in with Google, only if you choose it. · United States
- Stripe · Payments for paid plans. · United States
Content features
- Firecrawl · Reads the public web pages you ask us to read, such as your site for a brand kit. Receives only those addresses. · United States
- Unsplash · Stock photo search. Receives search terms, not your issue. · United States
- PostHog · Pseudonymous product analytics, only after you accept optional cookies, and only once we turn it on. Never receives your content or email address. · European Union
Email platforms you connect, such as Kit or Mailchimp, aren't subprocessors: you choose them, and their own terms apply.
We update this page before we add a new subprocessor. Questions go to support@canvasletter.com.