Sub-processors
Effective: February 2026 · Last Updated: February 21, 2026
Overview
Ghost BI uses the following third-party sub-processors to deliver our product intelligence platform. Each sub-processor has been vetted for security and data protection compliance. This list is maintained in accordance with our Data Processing Agreement.
We will notify customers of any changes to this list at least 30 days before engaging a new sub-processor, giving you the opportunity to object.
| Sub-processor | Purpose | Data Processed | Location |
|---|---|---|---|
| Anthropic | AI/LLM provider for generating structured product intelligence | Customer API input data (transient processing only, not stored by Anthropic for training) | United States |
| Stripe | Payment processing and subscription billing | Billing information, payment method details, invoice records | United States |
| Resend | Transactional email delivery | Email addresses, email content (verification, password reset, notifications) | United States |
| Railway | Cloud infrastructure hosting and deployment | Application data, database storage (PostgreSQL), environment variables | United States |
Data Processing Details
Anthropic
Customer API input data (transient processing only, not stored by Anthropic for training)
Stripe
Billing information, payment method details, invoice records
Resend
Email addresses, email content (verification, password reset, notifications)
Railway
Application data, database storage (PostgreSQL), environment variables
AI Provider Disclosure
Ghost BI uses Anthropic Claude as its primary AI provider for processing customer data through our intelligence APIs. Key safeguards include:
- Customer data is processed transiently — Anthropic does not retain API inputs/outputs for model training
- Ghost BI does not store LLM input or output content; only metadata (request timestamps, latency, success/failure) is logged
- All data transmission to Anthropic occurs over encrypted channels (TLS 1.2+)
- Anthropic's data processing practices are governed by their Privacy Policy and commercial API terms
Change Notifications
Ghost BI will update this page and notify affected customers via email at least 30 days before adding or replacing a sub-processor. If you object to a new sub-processor, you may terminate your subscription in accordance with our Terms of Service.
Contact
For questions about our sub-processors or data processing practices, contact us at privacy@ghostbi.com.