01Current list
Providers that process personal data for the website. "Held by" means the provider's own record; copies delivered into mailboxes are ours and are covered in the privacy policy.
| Provider | What it does | Data | Where | Retention |
|---|---|---|---|---|
| Cloudflarehosting and edge | Hosts and protects the website, routes the database connection and limits repeated requests. | Technical data including IP address; enquiry details in transit. | Global network | Provider-controlled request records. |
| Supabasedatabase | Stores temporary confirmation records and verified enquiries. | Enquiry details. | Not stated | Unconfirmed: removed within 24 hours after the 15-minute link expires. Confirmed: 120 days. |
| Resendtransactional email | Sends confirmation, team-notification and acknowledgement emails. | Email addresses, names, and the enquiry or message details in team notifications. | Not stated | Held by Resend for 30 days on our current plan. |
| TypeSafeAI decisions | Decides which approved answer fits a chat question or a contact message (the primary decision provider). See the AI data policy. | Chat: the current message and up to four recent earlier messages, with a short note of your stated goal and business. Contact form: the topic and message text only, not your name, email address or other form details. Personal details a visitor types into chat or a message are part of the text. | Not stated by us | Not stated by us. Its published terms say it does not train models on customer data without consent and may keep technical records such as logs and classifications. |
| OpenAIAI answers | Writes chat answers, makes the answer-choice decision if TypeSafe is unavailable, and drafts contact acknowledgements. See the AI data policy. | Chat messages (up to nine); contact name, topic and message text. Not email addresses or enquiry-form details. | Global setting; no region claimed | Standard abuse-monitoring retention (up to 30 days); organisation data sharing off; no Zero Data Retention. |
The Tractionora application may use further providers, such as for billing. They will be listed in the application notice.
02Data sources you connect
Google Search Console and Google Analytics are data sources a customer chooses to connect, with read-only access. They are not our service providers.
03Changes to this list
We will post changes here with the date.
04Questions
Email legal@tractionora.com.