Last updated: July 3, 2026
Ghosts uses the vendors below to provide the Service. Each is bound by contract to data-protection terms no less protective than our Data Processing Addendum, and each may use customer data only to provide its service to us. We will notify workspace administrators by email at least 30 days before we add a new subprocessor.
| Vendor | Purpose | Data involved | Location |
|---|---|---|---|
| Supabase | Database and authentication | Account data and Customer Content | USA |
| Anthropic | AI text generation | Briefs and drafts during processing, retained a maximum of 30 days, never used for training | USA |
| OpenAI | Text embeddings for the knowledge library | Document excerpts during processing, not used for training | USA |
| Stripe | Payments | Billing contact and transaction data | USA |
| Resend | Transactional email | Name and email address | USA |
| Cloudflare | Hosting, CDN, and security | Request metadata | Global |
| Serper | Web research | Search queries derived from briefs, no account data | USA |
| Replicate | Writer avatar image generation | No customer content | USA |
Questions about our subprocessors: [email protected].