Last updated: June 27, 2026
This page lists the third-party service providers ("sub-processors") that Paid Rightly LLC uses to provide Signed Reviews. Each sub-processor is contractually required to use personal data only to provide services to us and to maintain appropriate security safeguards.
We may update this list from time to time. Material additions will be reflected by updating the "Last updated" date. We recommend checking this page periodically.
# Core infrastructure
| Sub-processor | Purpose | Data categories | Location |
|---|---|---|---|
| Railway | Cloud hosting and managed PostgreSQL database | All Service data at rest | United States |
| Cloudinary | Image hosting for review photos and business brand assets | User-uploaded images (review photos, logos) | United States |
| Stripe | Business Stripe account linking (Connect OAuth or a restricted API key) and webhooks. Read-only access used to verify reviews and to compute the metrics a merchant chooses to show on their public review page. We never charge, refund, move funds, or modify the connected account. | Stripe account ID or restricted API key (encrypted at rest); transaction metadata (charge ID, customer email, card last-4, amount, currency); aggregate read of charges, customers, subscriptions, refunds, disputes, and balance transactions for merchant-enabled metrics | United States |
| Resend | Transactional email delivery | Recipient email addresses; email content (verification links, magic links, team invitations, review-request emails) | United States |
# AI services
| Sub-processor | Purpose | Data categories | Notes |
|---|---|---|---|
| Anthropic | Business-facing AI feature: logo extraction (selecting the most likely logo from a business's website for the public review page and badge), using Claude models | Public website HTML/URL and candidate logo or brand images provided by the business during setup | Not used on review content, reviewer data, or payment data. Anthropic does not train on data sent through its API under its commercial terms. |
| Google (Gemini) | Alternate AI provider for the same business-facing AI feature (logo extraction), via the Google Gemini API | Public website HTML/URL and candidate logo or brand images provided by the business during setup | Not used on review content, reviewer data, or payment data. |
# Analytics
| Sub-processor | Purpose | Data categories | Location |
|---|---|---|---|
| PostHog | First-party product and marketing-site analytics (page views, feature usage, and conversion funnels) on our marketing site and the merchant dashboard | Usage and device data (pages viewed, UI interactions, approximate location from IP, browser/OS). For signed-in merchants only: user ID, email, and business association | United States |
Scope and safeguards. PostHog runs only on our marketing site (signedreviews.com) and the authenticated merchant dashboard. It is not loaded on public review pages or reviewer-facing review-submission pages — so review readers and reviewers are not tracked by it. Session replay is enabled on the marketing site and merchant dashboard, with all form-field inputs masked (passwords, email addresses, and payment details are never captured); replay is suppressed for visitors who send a "Do Not Track" or Global Privacy Control signal. For marketing-site visitors in the EU, EEA, and UK, replay is off by default and starts only after opt-in consent via an on-page banner. A "Privacy choices" footer link lets any visitor opt in or out at any time. We use a first-party cookie (not cross-site tracking) and honour browser "Do Not Track."
# OAuth providers (only when used)
These sub-processors receive data only when a user chooses to log in or attach a profile using that provider. If you do not use a given provider, no data is shared with it.
| Sub-processor | Used for | Data exchanged |
|---|---|---|
| Business login (SSO); reviewer profile attachment | OAuth sub, email, name, profile picture | |
| GitHub | Business login (SSO); reviewer profile attachment | OAuth ID, verified email, name/username, avatar URL |
| Business login (SSO); reviewer profile attachment | OAuth sub, email, name, profile picture | |
| Microsoft | Business login (SSO) | OAuth ID, email, display name |
| Reviewer profile attachment | Facebook ID, name, profile picture | |
| Reviewer profile attachment | Instagram handle, name, profile picture (via Facebook OAuth) | |
| Twitter / X | Reviewer profile attachment | Twitter/X ID, name, username, profile picture |
# Specialized services
| Sub-processor | Purpose | Data categories | Notes |
|---|---|---|---|
| Decodo | Proxy service used to retrieve public Instagram profile data (profile picture and display name) during the reviewer profile attachment flow | Instagram profile URL (public); IP address of our backend server | Used only when a reviewer selects Instagram as their profile source and the direct OAuth path is unavailable. |
| Gravatar | Check whether a reviewer's email address has an associated Gravatar image | MD5 hash of email address | Used only when a reviewer chooses the Gravatar avatar option. We do not store Gravatar images. |
# Sub-processors we do not use
For transparency, we want to be clear about services we do not use as of the date above:
- No third-party analytics beyond PostHog — PostHog (listed above) is our only analytics provider, used for first-party product and marketing-site analytics. We do not use Google Analytics, Mixpanel, Amplitude, Segment, Plausible, Heap, or similar.
- No advertising networks
- No standalone session replay tools (no FullStory, Hotjar, LogRocket, or similar). Session replay is provided by PostHog — our existing analytics sub-processor listed above — with all form-field inputs masked; we do not add a separate replay vendor.
- No error tracking services with PII access (no Sentry, Datadog, Rollbar, or similar at this time)
- No marketing email platforms (no Mailchimp, HubSpot, ActiveCampaign, or similar — we use Resend only for transactional email)
- No customer data platforms or enrichment services
- No cross-site tracking cookies or fingerprinting (PostHog uses a first-party analytics cookie only)
# Changes to this list
When we add a new sub-processor or change how an existing one is used in a way that materially affects personal data processing, we will:
- Update this page and the "Last updated" date above
- For material additions affecting business users or reviewers, provide notice through the Service or by email when practicable
You can request notification of future changes by emailing legal@signedreviews.com with the subject line "Sub-processor updates."
# Contact
Questions about sub-processors or how your data flows through them:
Email: legal@signedreviews.com Mail: Paid Rightly LLC, 1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110, United States