Spiral Subprocessor Page

Last updated: August 27, 2025

This page lists third party providers that Spiral Ad, Inc. uses to help deliver, support, secure, and improve the services. Each provider that processes Customer Personal Data on our behalf is a subprocessor. We contract with subprocessors under data protection terms, and require appropriate security controls.

Data roles. Customer Personal Data is processed as a processor. Service and Usage Data may be processed as an independent controller as described in our Privacy Policy.

Updates & objections. We update this page at least ten business days before a new Subprocessor begins processing Customer Personal Data. Posting here is our notice under the DPA. Enterprise customers may object on reasonable data protection grounds within ten business days of the posting, as set out in the DPA.

Questions: support@spiral.ad

Current subprocessors:

Cloudflare — CDN, DNS, and edge security (WAF/DDoS)
Supabase — Database, authentication, and file storage
Resend — Transactional and marketing email delivery
Stripe — Payment processing and invoicing
Crisp — Customer support chat
Fly.io — Application hosting and background workers
Grafana — Monitoring dashboards, metrics, and alerting
Vercel — Frontend hosting and serverless functions
Anthropic — AI inference for text generation
OpenAI — AI inference for image and text generation
PostHog — Product analytics and event tracking