LEGAL
Subprocessors
Third parties that process personal data on Lunxa's behalf.
- Version:
- 1.0-draft
- Last updated:
- November 7, 2026
Draft — pending legal review. This document is a working draft and has not yet been approved by legal counsel. Bracketed items will be completed before final publication.
| Subprocessor | Purpose | Data | Location | Status |
|---|---|---|---|---|
| Railway Corp. | Application hosting, PostgreSQL database | All service data | [Region to confirm] | Active |
| Object storage provider (S3-compatible) | File attachments | Uploaded files | [Provider and region to confirm] | When configured |
| Stripe, Inc. | Payments, invoicing, tax | Billing contact, payment metadata | US / EU | When configured |
| Resend, Inc. | Transactional email delivery | Email address, email content | US | When configured |
| Anthropic PBC | AI responses | Prompts and selected context | US | When configured |
| OpenAI, L.L.C. | AI responses (optional) | Prompts and selected context | US | When configured |
"When configured" means the provider only receives data once Lunxa activates that integration. We'll update this page at least 30 days before adding a subprocessor.