Sub-processors
Version / last updated: June 16, 2026
To run Superlurk we rely on the categories of third-party providers below. This page is the authoritative, versioned list and mirrors the sub-processor categories in our Privacy Policy. The specific vendor behind each category is available to customers and their auditors on request at privacy@superlurk.com for due-diligence reviews.
1. Current sub-processors
| Sub-processor | Purpose | Primary region |
|---|---|---|
| Cloud hosting & CDN provider | Hosting and global content delivery for the web app; processes the request logs needed to serve, cache, and protect the site. | Global edge network (primary: United States) |
| Backend hosting provider | Cloud hosting for the backend API and its database. | United States |
| Authentication & application-database provider | Authentication (including anonymous guest sessions and sign-in emails) and database hosting for accounts, conversation history, and usage logs. | United States / EU (by project region) |
| Payment / merchant-of-record provider | Payment processing as Merchant of Record — card details go directly to the provider and never touch our servers; collects and remits taxes and handles refunds. | Global (Merchant of Record) |
| AI model provider | Generates your answer — the query and the public content we retrieved are sent to the model. Account identity is not shared with it. | United States |
| Search & data providers | Retrieve public social posts, engagement metrics, and web results to support answers. Account identity is not shared with them. | Global / United States |
Authentication emails (such as magic links) are sent through our authentication provider. We don't currently use a separate transactional- or marketing-email provider; if we add one, it will appear here before we turn it on.
2. Changes & notification
We update this page whenever we add, replace, or remove a sub-processor. Where we have a contract or legal obligation to do so, we notify affected account holders in advance of a new sub-processor and give them a reasonable opportunity to object before it begins processing personal data. Continuing to use the service after the change takes effect constitutes acceptance of the updated list.
Questions or objections about a sub-processor: privacy@superlurk.com.
3. International transfers
Some sub-processors process data outside your country, including in the United States. Where required, those transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses and the UK addendum offered by each provider. See the Privacy Policy and our Data Processing Addendum for details.