Property Claim Guide uses select third-party services ("sub-processors") to operate our platform. Each sub-processor is contractually bound to handle data only as instructed by us and in compliance with applicable privacy laws. This page is the canonical, continuously updated list.
01 — Infrastructure & hosting
Where the platform runs.
| Sub-processor | Purpose | Data categories | Location | Privacy policy |
|---|---|---|---|---|
| Cloudflare, Inc. | Cloud hosting, D1 database, R2 object storage, CDN, DDoS protection, Turnstile bot detection | All platform data (assessment submissions, contractor profiles, lead data, user accounts, uploaded photos and documents) | Global (primary storage US) | cloudflare.com |
02 — Payment processing
How we handle money.
| Sub-processor | Purpose | Data categories | Location | Privacy policy |
|---|---|---|---|---|
| Stripe, Inc. | Payment processing, subscription management, invoicing | Payment method details, transaction amounts, billing addresses, subscription metadata | US & Global | stripe.com |
03 — Communications
Email & SMS providers.
| Sub-processor | Purpose | Data categories | Location | Privacy policy |
|---|---|---|---|---|
| Resend, Inc. | Transactional and lifecycle email delivery | Email address, email content (template variables), delivery events | US | resend.com |
| Twilio, Inc. | SMS notifications for lead alerts (opt-in required) | Phone number (E.164), SMS opt-in status, message content | US | twilio.com |
| Google LLC (Workspace) | Business email hosting for Caro AI persona and support | Email content, attachments, metadata (to/from/date headers) | US & Global | policies.google.com |
04 — AI inference
Where Caro runs.
| Sub-processor | Purpose | Data categories | Location | Privacy policy |
|---|---|---|---|---|
| RunPod, Inc. / Lambda Labs, Inc. | GPU infrastructure for Caro AI vision-language model inference | Uploaded photos, structured damage facts. No contact PII is shared. | US | RunPod · Lambda |
| browserless, Inc. | Headless Chrome for PDF report generation | Report HTML (damage summary, scores, ranges). No raw photos or contact PII. | US | browserless.io |
05 — Analytics & monitoring
How we measure & observe.
| Sub-processor | Purpose | Data categories | Location | Privacy policy |
|---|---|---|---|---|
| Plausible Insights OÜ | Cookie-free website analytics | Anonymized page URLs, referrer headers, device/browser info (no cookies, no IP storage) | EU (Estonia) | plausible.io |
| Functional Software, Inc. (Sentry) | Application error monitoring and crash reporting | Error stack traces, request paths, browser metadata (PII scrubbed) | US | sentry.io |
06 — Changes to this list
How additions are announced.
Sub-processors may be added or changed. When we add a new sub-processor, we will update this page at least 14 days before the sub-processor begins processing data. Registered users will also be notified by email of material additions.
Questions about our sub-processors? Contact [email protected].