Data processors
Last updated 29 July 2026
Most entries below receive far less than people expect. The services that write your articles are sent a keyword and your brand profile — never your name, email, or anything about your account.
Infrastructure
Cloudflare
Purpose. Hosting, application database (D1), session store (KV), job queues, CDN
Data received. All account data: email, name, brand profiles, articles, submission records, session cookies
Processing location. Global edge network
Payments
Stripe
Purpose. Subscription and one-time payments, invoices, fraud prevention (Radar)
Data received. Email, name, billing address, card details (held by Stripe, never by us), device and browsing signals for fraud scoring
Processing location. USA, with global processing
Communication
Resend
Purpose. Transactional email — sign-in links, welcome messages, product notices
Data received. Email address, message content
Processing location. USA
Customer support
Intercom
Purpose. In-app support messenger for signed-in customers
Data received. Account id, name, email, signup date, and the contents of any conversation you start
Processing location. USA
Slack
Purpose. A shared channel with your team, opened when you create your first brand. You join from your own Slack, not ours.
Data received. Your company name (as the channel name), the email address the invitation is sent to, and the contents of that conversation
Processing location. USA
Analytics
PostHog
Purpose. Product analytics and session replay, proxied through our own domain
Data received. Pseudonymous usage events, session recordings with input fields masked
Processing location. USA
Authentication and Google services
Google (OAuth, Search Console, Indexing API)
Purpose. Sign-in, and — only for properties you explicitly connect — read-only Search Console performance data and indexing requests for pages we publish
Data received. Email, name, profile picture; Search Console access is read-only and revocable from your Google account at any time
Processing location. Global
Content generation
Anthropic
Purpose. Article research and drafting
Data received. Brand profile and keyword context you provide. No customer identity is sent
Processing location. USA
OpenAI
Purpose. Article research and drafting
Data received. Brand profile and keyword context you provide. No customer identity is sent
Processing location. USA
Google Gemini
Purpose. Article research and drafting
Data received. Brand profile and keyword context you provide. No customer identity is sent
Processing location. USA
Perplexity
Purpose. Checking whether AI assistants cite your brand for tracked questions
Data received. Brand name and question text only
Processing location. USA
Search and enrichment data
DataForSEO
Purpose. Keyword volume and difficulty, and search-result data
Data received. Keywords and domains only. No customer identity is sent
Processing location. USA
Context.dev
Purpose. Building a brand profile from a domain you enter
Data received. The domain you provide
Processing location. USA
IndexNow
Purpose. Notifying search engines that a published page exists
Data received. Published article URLs only
Processing location. Global
Publishing destinations
Your CMS (WordPress, Webflow, Shopify, and others you connect)
Purpose. Publishing finished articles to your own website
Data received. Article content and the credentials you supply, stored encrypted and used only to publish on your instruction
Processing location. Wherever you host it
Transfers outside your country
Several of the services above process data in the United States. If you are in the UK, EU, or another region with transfer restrictions, that is an international transfer. Each of these providers offers standard contractual clauses or an equivalent transfer mechanism in their own data processing terms.
Session replay through PostHog is the entry most worth knowing about, because recordings are personal data and are processed in the US. Input fields are masked, so credentials and anything you type into a form are not captured — but page navigation and clicks are.
Changes
We update this list when a processor is added or removed. If you want to be told in advance rather than checking, email team@kiterank.com and we will add you to the notice list.
Questions
Write to team@kiterank.com. Our privacy policy explains what we collect and the rights you have over it.