LEGAL · SUBPROCESSORS
Subprocessors, named.
Review the service providers that process data for Retail Reason, what each provider does, and which customer information may pass through them.
These providers process limited data on Retail Reason’s behalf for the purposes shown. A customer-selected AI client separately processes the client conversation and returned Output under the customer’s agreement with that client provider.
Scroll sideways to review every provider field →
| Provider | Limited purpose and data | Role at launch | Provider terms |
|---|---|---|---|
| Cloudflare | Public-site delivery and security; website usage and performance analytics; application compute; account, workspace, session, private website conversation, uploaded and generated file, operational, and corpus storage; queues; logs; DNS; and founder access controls. | Production infrastructure for the public site and the customer-serving service. | Privacy · DPA |
| WorkOS | Account authentication, identity records, sessions, invitations, membership events, and related security metadata. | Production identity provider for Retail Reason accounts. | Privacy · DPA |
| OpenAI | API generation, an automated second-pass answer review, and file analysis or creation using relevant messages, supplied context, selected references, limited conversation excerpts, selected uploads, and generated material needed for review. File jobs use the Files API and isolated execution containers. | Retail Reason’s server-side production model provider. The review is automated; no person sits between the question and the delivered answer. This API role is separate from the AI client a customer chooses to use. Website chat runs through Retail Reason’s provider account and needs no personal ChatGPT connection. | Privacy · DPA |
| Stripe | Customer and billing details, tax calculation, subscriptions, invoices, payments, refunds, disputes, and the billing portal. Payment credentials go directly to Stripe rather than Retail Reason. | Production billing, tax, payment, refund, and customer billing-portal provider. | Privacy · DPA |
| Resend | Transactional email address, sender, subject, template content, delivery status, and provider message identifiers. | Production transactional email and delivery-status provider. | Privacy · DPA |
Independent client processing: Anthropic is not Retail Reason’s server-side model subprocessor and receives nothing from Retail Reason’s serving route. When a customer selects Claude hosted or Claude Code, Anthropic independently processes that client conversation, tool request, and returned Output under the customer’s separate agreement. Codex CLI and ChatGPT independently process the client conversation and returned Output under the customer’s separate OpenAI client agreement. The connection guide explains account access and setup requirements. If another provider begins processing customer data under Retail Reason’s instructions, this register and the Privacy Policy must be updated first.
A customer-selected AI client or platform independently processes the conversation, tool request, request content, Retail Reason’s returned Output, and related metadata under its own agreement. That independent client handling is not processing by a Retail Reason subprocessor under Retail Reason’s instructions. This register is reviewed before publication and whenever a provider or processing purpose materially changes.