Subprocessors

Mercateer uses the providers below to deliver the service. Each processes customer personal data only as needed for its purpose, under a contract that imposes data protection obligations no less protective than our data processing agreement.

We give customers at least 30 days’ notice before adding or replacing a subprocessor that processes customer personal data, with a 14-day objection window, as set out in the data processing agreement.

Vercel (United States): application hosting and AI gateway routing.

Convex (United States): database and backend infrastructure.

Cloudflare (United States, global edge network): content delivery, network security, and bot protection.

Clerk (United States): customer authentication and sign-in.

Stripe (United States): payment processing for customer billing.

Anthropic (United States) and OpenAI (United States): AI model inference for understanding and responding in conversations. These providers are prohibited from using customer personal data to train their models, and any retention by them is limited to short periods needed to provide the service and for safety and abuse monitoring.

Telecommunications carriers and messaging providers (United States): delivery of phone calls and text messages handled by the service.

PostHog (United States): product analytics, subject to the consent controls in the cookie policy.

Sentry (United States): error and performance monitoring.