LEGAL · SUBPROCESSORS
Subprocessors, named.
Review the service providers that process data for Retail Reason, what each provider does, and which customer information may pass through them.
These providers process limited data on Retail Reason’s behalf for the purposes shown. A customer-selected AI client separately processes the client conversation and returned Output under the customer’s agreement with that client provider.
Scroll sideways to review every provider field →
| Provider | Limited purpose and data | Role at launch | Provider terms |
|---|---|---|---|
| Cloudflare | Public-site delivery and security; application compute; account, workspace, session, operational, and corpus storage; queues; logs; DNS; and founder access controls. | Production infrastructure for the public site and the customer-serving service. | Privacy · DPA |
| WorkOS | Account authentication, identity records, sessions, invitations, membership events, and related security metadata. | Production identity provider for Retail Reason accounts. | Privacy · DPA |
| OpenAI | API generation and an automated second-pass answer review using the current question or draft, pasted context, selected reference material, limited session excerpts, and, for review, the draft answer and sanitized evidence. | Retail Reason’s server-side production model provider. The review is automated; no person sits between the question and the delivered answer. This API role is separate from the AI client a customer chooses to use. | Privacy · DPA |
| Stripe | Customer and billing details, tax calculation, subscriptions, invoices, payments, refunds, disputes, and the billing portal. Payment credentials go directly to Stripe rather than Retail Reason. | Production billing, tax, payment, refund, and customer billing-portal provider. | Privacy · DPA |
| Resend | Transactional email address, sender, subject, template content, delivery status, and provider message identifiers. | Production transactional email and delivery-status provider. | Privacy · DPA |
Independent client processing: Anthropic is not Retail Reason’s server-side model subprocessor and receives nothing from Retail Reason’s serving route. When a customer selects Claude hosted or Claude Code, Anthropic independently processes that client conversation, tool request, and returned Output under the customer’s separate agreement. Codex CLI is handled under the customer’s separate client-provider agreement. ChatGPT is disabled and sends no client traffic to Retail Reason. If another provider begins processing customer data under Retail Reason’s instructions, this register and the Privacy Policy must be updated first.
A customer-selected AI client or platform independently processes the conversation, tool request, request content, Retail Reason’s returned Output, and related metadata under its own agreement. That independent client handling is not processing by a Retail Reason subprocessor under Retail Reason’s instructions. This register is reviewed before publication and whenever a provider or processing purpose materially changes.