Subprocessors

Version 2026-09-03 · Effective 2026-09-03

1. What this page is

This page lists the third-party service providers (“subprocessors”) that process information about the people who use Voter Count, what each one does for us, and what it receives. It is the vendor inventory behind section 6 of our Privacy Policy, which describes the same sharing in context.

We keep this list current: if we add a vendor that processes user information, or materially change what an existing one receives, we will update this page and its version date.

2. Current subprocessors

Google Cloud Platform (Google LLC)

Purpose. Cloud infrastructure: hosts the application, its database, its secrets, and its server logs. Our primary application database is located in the United States.

What it receives. All product data at rest and in transit — account information, conversation history, and server logs — as the hosting provider.

Snowflake Inc.

Purpose. Data analysis: runs the queries that produce answers to your questions against the licensed voter dataset.

What it receives. The text of your questions (and earlier turns of the same conversation for context), and feedback comments you write. Requests are authenticated as our application — your name, email, and account identifier are not included.

Stytch Inc.

Purpose. Connection authorization: operates the service that lets you connect an external AI assistant (such as Claude or ChatGPT) to your account and issues that assistant its access credential.

What it receives. Your email address and an internal account identifier, only when you approve a connection. Stytch also sees standard connection metadata (such as your IP address) while you use its authorization pages. If you never connect an assistant, no information about you is sent to Stytch.

Stripe, Inc.

Purpose. Payment processing for paid subscriptions. Paid subscriptions are not currently offered in production; Stripe processes no production user data until they are.

What it receives. When subscriptions are active: your email address, an internal account identifier, and your payment details (which Stripe handles directly — we never see or store card numbers).

Amazon Web Services, Inc. (Amazon SES)

Purpose. Transactional email: invites, password resets, and notices when your login credentials change.

What it receives. Your email address and the contents of those messages. Sent through a dedicated configuration set with open and click tracking turned off, so SES does not rewrite links or add a tracking pixel to these messages.

Google Workspace (Google LLC)

Purpose. Receives and stores email you send to our published contact addresses, including privacy and data-subject requests.

What it receives. Your email address and the contents of any message you send us, including anything you include to identify yourself when exercising a privacy right.

Google LLC (Sign in with Google)

Purpose. Optional single sign-on. Only involved if you choose to sign in with a Google account.

What it receives. Authenticates you on Google's side and provides us your name, email address, and profile image.

Zapier, Inc.

Purpose. Automation: delivers invite requests from our homepage to a shared waiting-list spreadsheet maintained by the Independent Voter Project, a separate organization described under its own heading on this page. Involved only if you request an invite.

What it receives. Your email address, the time of your request, your answer about the kind of work you do, and — if you arrived from a plan-specific link on our pricing page — the name of the plan you asked about. Nothing about your account, your questions, or your conversations.

Upstash, Inc.

Purpose. Rate limiting and abuse prevention for sign-in and chat requests.

What it receives. Your IP address, held briefly in rate-limit counters keyed to short expiry windows. Our own database stores only a salted one-way hash of an IP, never the address itself.

Cloudflare, Inc.

Purpose. Domain name service for our web addresses, and the redirect that forwards our two older web addresses (www.votercount.ai and our former address, chat.ivcmediallc.com) to the current one. Requests to the site itself go directly to our hosting provider and do not pass through Cloudflare.

What it receives. Only if you open a link pointing at one of those two older addresses: the address you requested — including anything carried in the link, such as the one-time code in an invite or password-reset link — along with your IP address and any cookies your browser sends. Cloudflare does not receive your questions, your conversations, or your account record.

3. L2 Inc., our data partner

L2 Inc. provides the voter data the product queries and is a partner rather than a service provider acting on our instructions, so it is listed here for completeness rather than as a subprocessor. We report aggregate usage figures to L2 that do not identify you. Separately, if you request a demo or licensed access to individual voter records, we send L2 your contact details and what you asked for so their team can respond — only when you ask for it. See section 6 of the Privacy Policy.

4. Independent Voter Project, recipient of invite requests

If you request an invite from our homepage, your email address, your answer about the kind of work you do, and — if you arrived from a plan-specific link on our pricing page — the name of the plan you asked about are copied to a shared waiting-list spreadsheet that the Independent Voter Project maintains, delivered by Zapier (listed above). Like L2, IVP receives this as a separate organization rather than as a service provider acting on our instructions, so it appears here rather than in the list above. This covers invite requests only — nothing about your account, your questions, or your conversations is shared with them. The spreadsheet is theirs rather than ours, so deleting your address from our own waiting list does not remove their copy. That also means the spreadsheet software they keep it in is their provider rather than ours, so it is not listed above; the Google Workspace row above covers only our own systems. See section 6 of the Privacy Policy.

5. Questions

Questions about this list: privacy@votercount.ai.