01
What this list is
A subprocessor is a company we use to provide Xodia that may process personal data you or your team put into it. Each one is bound by a written agreement that requires it to protect the data and use it only to provide its service to us. The data processing addendum sets out how we choose and change them, and the privacy policy describes what we collect.
02
Our subprocessors
| Company | What it does for Xodia | Where |
|---|---|---|
| Cloudflare, Inc. | Hosts the app and its database, file and git storage. Runs preview sandboxes and project screenshots, checks sign-in and forms for bots (Turnstile), and protects the service. Keeps short-lived request logs. | United States and Cloudflare's global network |
| Stripe, Inc. | Payments, cards, invoices, tax and the billing portal. | United States |
| Resend, Inc. | Sends account emails, such as sign-up, password resets, invitations and billing notices, and delivers messages from this website's sales form to us. | United States, sending from Japan |
| Anthropic, PBC | Runs built-in AI, only when you use it. Doesn't train its models on the data, under its commercial terms. | United States |
| Google LLC | Runs SEO and speed tests with Google PageSpeed Insights, on the public address of the page you test. | United States |
03
Services you connect
When you connect GitHub, Vercel, Netlify, Google Analytics or your own Cloudflare account, Xodia works with that service on your behalf, under your own account and your agreement with that company. They aren't our subprocessors: you choose them, and you can disconnect them in the app at any time. The same goes for an AI app you connect over MCP, which runs on your own AI subscription.
04
This website
This website, xodia.ai, uses Google Analytics 4 only if you accept it. That covers visits to this site, not data in your Xodia workspace, so it isn't listed above. See the cookie policy.
05
Changes to this list
Before we add or replace a subprocessor, we update this page and email the owners of paid workspaces at least 30 days ahead, unless we must act sooner to keep Xodia running or secure, in which case we tell you as soon as we can. You can object as described in the data processing addendum.
Questions about this list: email hello@zuzostudio.com.