Subprocessors

Cloudflare

Runs both Workers, the database, the key-value store, the usage counters, the backups, the email queue and the bot check on the sign-in form. Every request passes through it.

• Receives: Request text in memory while a check runs; account email addresses; usage counts; hashed keys.
• Location: Cloudflare’s global network; data at rest in its US and EU regions.

TypeSafe AI (the Jev model, through Cloudflare Workers AI)

The model tier. Receives the text of a check the rules could not settle, with the questions, and returns numbers. Never called for a project set to Edge-only or a request in fast mode.

• Receives: The text of an ambiguous check, and nothing about who sent it. TypeSafe retains what its own terms say; a zero-retention agreement is an Enterprise arrangement we do not yet have.
• Location: Cloudflare Workers AI.

Dodo Payments

The merchant of record: checkout, card storage, tax, receipts, refunds and the customer portal.

• Receives: Billing name, email address, card details (never seen by Unprofane), the plan and the metered check counts.
• Location: United States.

Resend

Sends the sign-in links, the quota notices and the billing emails.

• Receives: The recipient address and the message. No tracking pixel.
• Location: United States.

Changes

A new name appears here thirty days before it receives anything, and paying customers are emailed. Questions go to hello@unprofane.com.

Last changed September 24, 2026.