Sub-processors
Last updated: July 4, 2026
Growlift uses the third-party sub-processors below to deliver the service. Each is bound by a data-processing agreement and processes only the data needed for its function. We give notice of material changes to this list as described in our Data Processing Addendum.
| Sub-processor | Purpose | Data processed |
|---|---|---|
| Vercel | Application hosting, edge network, and blob storage for generated media | Application traffic, account identifiers, generated media assets |
| Neon | Managed PostgreSQL database | Workspace, content, and account data at rest |
| Clerk | Authentication and user/organization management | Account identity, email, session tokens |
| Stripe | Subscription billing and payment processing | Billing contact, subscription status (card data handled by Stripe, never Growlift) |
| Resend | Transactional and lifecycle email delivery | Recipient email address, message content |
| LLM providers via the Vercel AI Gateway (e.g. OpenAI, Anthropic, Google) | Content generation, keyword scoring, and quality review | Prompts derived from your site content and keywords (not used to train third-party models under the applicable API terms) |
| DataForSEO | Search-engine results and keyword data | Target keywords and domains (no personal data) |
| PostHog | Product analytics (loaded only after cookie consent) | Pageviews and product events, keyed to an anonymized identifier |
| Sentry | Error monitoring and performance tracing | Diagnostic error data, request metadata |
To request advance notice of new sub-processors, email privacy@growlift.com. See also our Privacy Policy and Data Retention Policy.