# Subprocessors

**Last updated:** October 26, 2026

This page lists the third parties **Rare X Labs Inc.** uses to help
provide the Rare CRM Service, and what each one does. It's referenced from
our [Privacy Policy](https://rarecrm.ai/legal/privacy) and our
[Terms of Service](https://rarecrm.ai/legal/terms), and — once a formal Data Processing
Addendum exists — from that too.

We keep this list on its own page, separate from the Privacy Policy and
Terms of Service, so it can be updated as our stack changes without
requiring a full revision of those documents. To be notified before we add
a new subprocessor or replace one, email **contact@rarecrm.ai** and ask to
be added to the subprocessor change list.

| Subprocessor | Purpose | What it processes |
| --- | --- | --- |
| Cloudflare | Application hosting, edge network, storage, and AI models (including voice transcription) | Journal content and attachments, application data, voice audio |
| code.storage | Storage | Journal content and attachments |
| Google | AI models; optional contacts sync, if a user connects it; business operations (e.g., customer support) | Journal content and prompts sent to AI models; contact data a user authorizes for contacts sync; support communications and related account information |
| WorkOS | Authentication | Account credentials / login identity |
| Stripe | Payment processing | Billing and payment information |
| PostHog | Product usage analytics and website session recordings | Usage/diagnostic data, device/browser information, recordings of visits to rarecrm.ai with form fields masked |

Data processed by these subprocessors may be handled in countries other
than the one you're located in — see [Section 6](https://rarecrm.ai/legal/privacy#6-where-data-is-processed-and-stored)
of the Privacy Policy.