These are the companies that process customer data on our behalf. We will publish an update here, and notify customers on paid plans, before adding a subprocessor that receives design data.
| Provider | Purpose | What reaches them | Location |
|---|---|---|---|
| Vercel Inc. | Application hosting and content delivery | Application files; request metadata such as IP address and browser. No design data at rest. | USA |
| Railway Corp. | Runs our API | All customer data passes through the API in transit | USA (us-west) |
| Supabase Inc. | Managed PostgreSQL database | All customer data at rest — designs, materials, equipment, measurements, calibrations | USA (us-west-2) |
| Clerk Inc. | Authentication and team membership | Email address, authentication events, organisation membership. No design data. | USA |
| Stripe Inc. | Payment processing | Billing identity, subscription state, payment details. No design data. | USA |
| Anthropic PBC | The Lumi AI assistant | AI conversation content, and design context only where the individual user has consented | USA |
Because this is the question that matters most for coating work, here it is directly.
At rest, your design data lives in exactly one place: the Supabase-hosted PostgreSQL database. It is not copied to an analytics platform, a logging service, a data warehouse, or any other system.
In transit to a third party, it happens in exactly one situation: a user of the Lumi AI assistant who has (a) consented to Lumi and (b) separately chosen to let it see their design. That second choice can be turned off, leaving Lumi able to answer general questions without receiving the stack. Both settings are recorded per user and can be changed at any time.
We do not use a third-party analytics provider. Product usage events are stored in our own database, and our server filters every field against a fixed list of permitted values before storing it, so design content cannot be recorded even accidentally.
To be notified when this page changes, email privacy@cor-stellaris.com and ask to be added to the subprocessor notification list.