Sub-processors
Last updated: 2026-10-11
Private beta. 8pixel is in a private beta by invitation. The company is not registered yet, so the name on these pages is a working name. We do not take payments.
This lists service providers that may process personal data to operate 8pixel. The list applies to the platform. For a customer's published site, the customer is controller and 8pixel processes visitor data under the Data Processing Agreement.
| Provider | Purpose | Data categories | Region |
|---|---|---|---|
| Clerk | Authentication and user management | Account identity and authentication metadata | EU / US |
| Convex | Database and backend | Site content, submissions, bookings, invoices, metadata | US |
| OpenRouter | AI gateway and inference | Prompts, relevant site context, visitor-assistant conversations, uploaded images, audio and video you submit, and embeddings computed from your content | US |
| Google Cloud Translation | Website copy translation | Text you have chosen to translate, plus source and target language | US |
| AI model providers via OpenRouter | Run the model you chose (vendor register: trust.openrouter.ai) | The same content sent to OpenRouter, for the model being run | US and other regions |
| Resend | Transactional email and receiving email you send to us | Sender and recipient address and email content | US |
| Vercel | Hosting and delivery | Request metadata and infrastructure logs | Global edge / US |
| Sentry | Error and performance diagnostics | Minimised error and performance diagnostics | US (Sentry is certified under the EU-US Data Privacy Framework) |
| PostHog | Product analytics and session replay (activated only after your consent) | Consent-gated product usage events; session replay is masked | EU |
| Name.com | Domain registrar (only when you buy an address through us) | Registrant identity required by the registry: name, postal address, email, phone, and for a .se address a Swedish org.nr or personnummer. Transmitted to the registrar and the registry; the public WHOIS record does not show your name, address, phone or email, only country and region. | US |
| BigDataCloud | Reverse geocoding (only if you share your location during setup, to prefill your town) | Approximate latitude and longitude from your device | US |
| Geoapify | Address and town suggestions while you type | Address or town text you type and an optional country code | EU / US |
| Cloudflare Turnstile | Bot protection for the waitlist | IP address, technical browser signals and challenge results. We do not send email addresses or notes to Turnstile. | Global |
| Cloudflare Email Routing | Inbound email routing | Email routing metadata and message content in transit | Global |
| Tavily | Optional AI web search | Search queries and limited query context | US |
| Browserbase | Renders a page in a real browser when you import an existing website | The address you import and that page's own content | US |
| Browserless | Renders a page in a real browser when you import an existing website | The address you import and that page's own content | US |
| Cloudflare Browser Rendering | Takes a picture of a public web page you name as a reference in the AI chat | The address you name and that page's own content | Global |
| Firecrawl | Fetches and reads pages during import and web lookup | The address you import or look up and that page's own content | US |
| Google Places | Looks up business details, address and opening hours when you fill in your profile | The business name and town you search for | US |
| Cloudflare and Google (DNS lookups and zone management) | DNS lookups and zone management for addresses you connect | Domain names and DNS records; no personal details about you | Global |
| Google, Mozilla and Apple (browser push services) | Deliver notifications to your browser when you have turned them on | An address your browser creates for your device alone, and the timing of each notification. The content is encrypted and only your device can read it. | Global |
Changes
We update this page when a sub-processor is added, removed, or receives a materially changed purpose. Customers with a Data Processing Agreement receive notice of material changes under that agreement.
What this list does not cover
If you connect your own AI assistant, Claude or ChatGPT for example, that connection is yours and is not one of our sub-processors. That provider processes what is sent under its own terms. What a connected assistant can reach is described on the AI transparency page.
Transfers outside the EU and EEA
Some of our providers process data outside the EU and EEA, in practice in the United States. The transfer then rests on one of two safeguards.
Clerk, Resend and Vercel are certified under the EU-US Data Privacy Framework, which the European Commission has found to provide an adequate level of protection.
OpenRouter are covered by the European Commission's Standard Contractual Clauses, Module 2.
For the remaining providers outside the EU and EEA, among them Convex, Browserless, Browserbase, Cloudflare Browser Rendering, Firecrawl, Geoapify, Google Places and Google Cloud Translation, the safeguard is assessed per provider and we have not read it ourselves yet. We would rather write that than assert a safeguard we have not checked.
If you want the evidence for a particular safeguard, contact us and we will send a copy.
Agreements
Some providers include a data processing agreement in the terms we accept when we use their service.
We have read it for Clerk, Resend, Vercel and OpenRouter.
For the others on this list we have not checked such an agreement.
Contact us before processing if you need written evidence. We do not sell personal data.