Subprocessors

Version 1.2 · Effective: Aug 31, 2026 · Last updated: Aug 31, 2026

You are reading an archived version that is no longer in force. View the current version

1. What this list is

A subprocessor is a third-party provider that processes Service data on our behalf to run RUMA. This page is the canonical, always-current list. Each provider processes data only to provide its function to us, under contractual terms that restrict any use for its own purposes. We do not sell personal information.

2. Current subprocessors

Provider	Function	Location	Data involved	Added
Cloudflare, Inc.	Hosting, database, and object storage for uploaded files	USA / global edge network	All Service data in transit and at rest (encrypted in transit); uploaded files	July 8, 2026
Resend, Inc.	Transactional email (invitations, reminders, security emails)	USA	Recipient name and email address; the content of Service emails	July 8, 2026
Stripe, Inc.	Subscription payment processing (card details collected by Stripe directly)	USA	Billing contact; plan, subscription status and invoices; card metadata (brand, last4, expiry)	July 10, 2026
PostHog, Inc.	Product analytics (pseudonymized usage events) — announced ahead of activation; not yet processing Service data	USA	Once active: pseudonymized usage events only (coarse event names and properties, keyed-hash pseudonyms) — never names, emails, addresses, message or document content, uploaded files, or raw account identifiers	Announced July 28, 2026 — pending activation
Anthropic, PBC	AI response generation for RUMA Assistant — announced ahead of activation; not yet processing Service data	USA / global processing (data stored in USA)	Once active: Assistant messages and conversation context needed to generate a response; limited technical request metadata. Optional handoff email is not sent to Anthropic unless the visitor includes it in a chat message. Activation requires verified service-provider/DPA and no-training terms	Announced August 31, 2026 — pending activation

3. Changes & objections

We update this page before a new subprocessor starts processing Service data, and we notify business Customers of the change by in-app or email notice. If a Customer has a reasonable data-protection objection to a new subprocessor, contact privacy@ruma.rent within 30 days of the notice — we will work with you in good faith on a solution, and if none is possible you may terminate the affected Subscription as described in the Data Processing Addendum.

4. Contact

Questions about this list: privacy@ruma.rent. Operator: StatGazer LLC, a New York limited liability company, 418 Broadway, STE R, Albany, NY 12207, USA.