Pondral

Sub-Processors

Last updated: June 27, 2026

Pondral uses the following third-party sub-processors to deliver and operate the service. Each sub-processor processes data only as necessary for the stated purpose and in accordance with their own privacy policies (linked below) and any applicable Data Processing Agreements. No personal user data (names, emails, account details) is sent to AI analysis providers. Only brand names, website URLs, and industry context required for analysis.

Infrastructure & Service Providers

ProviderPurposeData ProcessedLocation
SupabaseDatabase hosting and authenticationAccount data, analysis results, usage recordsUnited States (hosted on AWS us-east-1)
VercelApplication hosting and CDNServer logs, IP addresses, request metadataUnited States (global CDN)
StripePayment processingPayment method details, billing address, transaction recordsUnited States
ResendTransactional email deliveryEmail addresses, email content, delivery metadataUnited States
PostHogProduct analyticsUsage events, page views, device metadata (no payment data)United States
SentryError tracking and performance monitoringError logs, stack traces, browser metadata (no PII by default)United States

AI Analysis Providers

ProviderPurposeData ProcessedLocation
Anthropic (Claude)AI visibility analysis engineBrand names, website URLs, competitor names, industry contextUnited States
OpenAI (ChatGPT)AI visibility analysis engineBrand names, website URLs, competitor names, industry contextUnited States
Google (Gemini)AI visibility analysis engineBrand names, website URLs, competitor names, industry contextUnited States
PerplexityAI visibility analysis engineBrand names, website URLs, competitor names, industry contextUnited States
xAI (Grok)AI visibility analysis engineBrand names, website URLs, competitor names, industry contextUnited States

Changes to Sub-Processors

We will update this page when sub-processors are added or removed. To subscribe to sub-processor change notifications, email hello@pondral.com and we will notify you at least 30 days before any new sub-processor begins processing your data.