Subprocessors
The third-party services that process personal data on our behalf to run this website, what each one does, and where.
1. Current list
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Vercel | Website hosting, serverless functions, request logs | IP address, request metadata, everything the site processes in transit | United States; global edge network |
| Neon | Postgres database | Account, session, community, waitlist and contact-form data described in the Privacy Policy | Region chosen for the project's database |
| Resend | Sign-in link emails and internal notifications | Recipient email address and message content | United States |
| GitHub | Optional “Continue with GitHub” sign-in (OAuth) | GitHub account ID, name, email and avatar URL that GitHub shares at sign-in | United States |
| Cloudflare Turnstilewhen enabled | Bot protection on sign-in, waitlist, contact and new-thread forms | Technical browser and device signals, IP address | Global network |
| Upstashwhen enabled | Rate limiting (Redis) | Hashed identifiers (salted IP hashes, account IDs) and counters | Region chosen for the project's Redis database |
Each provider name links to its own privacy policy. Providers marked “when enabled” are used only when the site is configured with them.
2. Not used
We do not use advertising networks, analytics or session-recording tools, data brokers, or payment processors. No AI model provider receives data from this website.
3. International transfers
Several providers are based in, or may process data in, countries outside Malaysia, including the United States. We choose providers that publish security and privacy commitments and process data only to run the features described in the Privacy Policy.
4. Changes
We update this page before a new provider starts processing personal data. Questions can be sent to devtmj@apeironlabs.tech.