Last updated · July 2026
The service providers that process data on our behalf to run AurumFlow. Each is bound by a written agreement, receives only what its job requires, and none of them receives your designs for any purpose other than storing or delivering them to you.
Railway — application hosting, the PostgreSQL database and the Redis cache. Holds account details, orders, specifications and invoices. Hosted in the United States.
Cloudflare R2 — object storage for every file you upload or we deliver: reference images, CAD models, renders and production photos. Buckets are private; files are served only through the platform and only to people entitled to them.
Vercel — hosting for the website and the three applications. Serves pages; holds no order data.
Our email provider — delivery of transactional email: verification, password resets, order updates and invoices. Receives the recipient address and the content of that message.
No newsletter or marketing list is shared with anyone, and we do not sell or rent addresses.
Anthropic — powers the assistant that turns a written brief into a draft specification. It receives the text and images you submit to that feature, and only when you use it. Your files are not used to train models.
Sentry — error monitoring. Receives technical diagnostics when something fails: the request path, error message and stack trace. It is not used for analytics or profiling.
Google Analytics — usage statistics on the public website only, and only after you accept cookies. It is never loaded inside the platform.
We will update this page before adding a sub-processor that handles client data, so you can see who is involved before it happens.
To ask a question about any of them, or to request our data processing agreement, write to privacy@aurumflow.ai.