Legal
Sub-processors
Last updated: October 16, 2026
To provide RankControl, we rely on trusted third-party service providers (“sub-processors”) that may process personal data on our behalf under written contracts requiring appropriate security and confidentiality. This page lists our current sub-processors. Some are engaged only if you choose to connect them (for example, your publishing platform or analytics provider). Locations are indicative of each provider's primary processing region.
| Provider | Purpose | Location |
|---|---|---|
| Convex | Database, authentication, and backend infrastructure | United States |
| Hetzner | Application hosting | Germany (EU) |
| Cloudflare | Object storage (R2) and content delivery for files and images; bot protection (Turnstile) on forms | United States / Global |
| Stripe | Subscription billing and payment processing | United States |
| Resend | Transactional and account email delivery | United States |
| PostHog | Product analytics and session replay on rctrl.com (our own website and onboarding; not on customer websites) | United States |
| Google (Analytics and Ads) | Website traffic analytics and advertising measurement on rctrl.com (our own website; not on customer websites); ad conversion reports may include hashed contact details | United States |
| Sentry | Application error monitoring (error reports may include IP address and device information) | United States |
| Anthropic | AI content generation (Claude) | United States |
| OpenAI | AI content and image generation (GPT) | United States |
Changes
We may add or replace sub-processors as the service evolves. We will update this page when we do, and, where required by contract or law, we will provide advance notice so that you can object.
Contact
For questions about our sub-processors, use our contact form.