SourceFlag subprocessors
SourceFlag uses managed providers to operate the website, dashboard, billing, storage, AI-assisted features, business email, and optional walkthrough video embeds.
Purpose
AI processing for review, Ask, drafting, summarization, extraction, citations, and artifact generation.
Data categories
Prompts, selected file text, source excerpts, generated outputs, and related processing metadata.
Notes
SourceFlag uses managed AI providers to operate product features. Provider handling is governed by applicable terms, settings, and agreements.
Purpose
Authentication, database, private storage, and workspace records.
Data categories
Account data, auth/session data, workspace data, uploaded files, generated artifacts, and Ask/chat history.
Notes
Used for hosted dashboard identity, private file storage, and workspace persistence.
Purpose
Checkout, billing, subscriptions, customer portal, invoices, payment processing, AI usage packs, and limited payment metadata.
Data categories
Billing metadata, customer records, subscription status, payment status, and limited payment method details.
Notes
SourceFlag does not intentionally store full payment card numbers.
Purpose
Website and dashboard hosting.
Data categories
Website/dashboard delivery data, request metadata, and technical logs.
Notes
Used to host and deliver the public website and hosted dashboard.
Purpose
Background worker compute.
Data categories
Job processing data, file-processing tasks, workflow metadata, and technical logs.
Notes
Used for background processing infrastructure.
Purpose
Business email and administration.
Data categories
Email communications and administrative records.
Notes
Used for SourceFlag business communications.
Purpose
Optional marketing walkthrough video embeds.
Data categories
Video interaction data processed by YouTube/Google when users interact with embedded videos.
Notes
The marketing site uses privacy-enhanced embeds only for optional walkthrough video playback.
