Subprocessors
Effective August 13, 2026
| Subprocessor | Entity | Function | Data processed |
|---|---|---|---|
| Vercel | Vercel Inc. (US) | Application hosting and scheduled jobs | Request traffic and runtime logs |
| Supabase | Supabase Inc. (US) | Database, authentication, file storage | All Customer Personal Data stored in the Service |
| Resend | Resend Inc. (US) | Email transmission and receipt | Email sent and received through the Service, including bodies and attachments |
| Stripe | Stripe Inc. (US) | Subscription billing | Customer billing data (Business Contact Data; listed for transparency) |
| Cloudflare (Turnstile) | Cloudflare Inc. (US) | Automated-abuse prevention on public forms | Visitor IP address and browser signals |
| Anthropic | Anthropic PBC (US) | The in-app assistant in the help panel | Messages typed into the assistant and the conversation they belong to; passages from Constructo's own help guides; for subscription questions, the firm's plan name, subscription status, trial end date and active-project counts |
About the assistant subprocessor. Constructo's agreement with Anthropic PBC prohibits training models on data submitted through it. Anthropic deletes submitted inputs and outputs within 30 days, except where content is flagged under its usage policy, in which case it may be retained for up to two years. No project files, plan sets, drawings, comments, client messages, invoices or contact records are transmitted to it. Constructo deletes its own copy of each conversation 12 months after the conversation's last message.
Contacted by the end user's browser, not by Constructo. One flow reaches a third party directly from the user's device rather than from our servers, so Constructo does not transmit the data in it: address suggestions (as a user types into an address field, the typed text goes from their browser to Photon, operated by Komoot GmbH (Germany)). This is disclosed in the Planlyx Privacy Policy. Because this request is made by the user's own browser and not by Constructo's servers, Komoot GmbH is not a subprocessor and does not appear in the table above.
(Until 2026-08-09, a project-location map embedded a frame served by the OpenStreetMap Foundation, and Constructo's own servers separately queried Photon to convert a saved project address into map coordinates — which did make Komoot GmbH a subprocessor for that flow. Both the map and the server-side geocode were removed on 2026-08-09; neither service receives anything from Constructo now.)
The current subprocessor list is maintained at planlyx.com/legal/subprocessors.
Questions about this document: legal@constructo.online