The providers behind the workflow.

Provider availability and configuration can change. This list describes the providers used by the current application and the data purpose for each one.

• Supabase: account authentication, database storage, private Campaign Kit brand-asset storage, and row-level access control.
• Vercel: application hosting, server runtime, and scheduled functions.
• Stripe: checkout, subscription billing, invoices, refunds, disputes, and the customer billing portal.
• OpenAI: scan synthesis, strategy generation, recommendation probes, and the configured web-search fallback.
• SerpApi: Google search and AI Overview evidence when the search provider is configured.
• Algolia Hacker News Search: public Hacker News discovery for buyer-question evidence.
• Resend: transactional email when email delivery is configured.
• Sentry: error and reliability telemetry when Sentry is configured.
• Google Search Console: read-only page and query measurement after a customer explicitly connects a property.
• HubSpot: buyer evidence, contact creation, qualification notes, and associated deal outcome measurement after explicit connection.
• GitHub: selected repository reads and reviewable draft pull-request creation after explicit installation.

ForumRank sends the minimum fields needed for the selected workflow, such as a domain, buyer keywords, provider evidence, account email, billing identifiers, or error context. Passwords, Supabase service keys, Stripe secrets, and encrypted integration tokens are not sent to AI or search providers.

• Website snapshots are bounded excerpts with a retention expiry; the fix contract does not retain raw page content indefinitely.
• Search Console uses the read-only webmasters scope and stores access tokens encrypted at rest.
• HubSpot and GitHub credentials stay server-side; HubSpot refresh tokens are encrypted at rest.
• ForumRank does not auto-publish website changes or post to third-party communities.

Account owners can download the stored workspace data from Settings and request deletion there. Account exports omit encrypted provider credentials. Deleting an account removes customer-identifiable outcome-corpus provenance before the account is deleted.

• Page snapshot retention is bounded by the snapshot expiry recorded with each fix.
• Product and operational event retention is documented in the event contract and billing records are retained as required for accounting and fraud controls.
• Search Console access can be revoked from Settings; revocation prevents future measurement syncs.
• HubSpot access can be revoked from Buyer tools; ForumRank revokes the provider token before deleting local token material.

We will update this page when the provider set or a material processing purpose changes. For a data-processing question or deletion request, use the support contact on the legal page.