Subprocessors
These companies process personal data on our behalf to run Tabductor. Each receives only what its job needs. The Privacy policy explains what we collect and why.
Before we add or replace a subprocessor we update this page. Business customers with a data processing agreement can ask to be notified; write to ammar@tabductor.com.
Current subprocessors
| Company | Purpose | Data | Location and safeguard |
|---|---|---|---|
| Amazon Web Services | Hosting: servers, managed browsers, database, file storage, encryption keys and the content delivery network. | All service data, including account records, workflows, run records, screenshots, browser profiles and encrypted secrets. | Sydney, Australia (AWS ap-southeast-2); content delivery edge locations worldwide. Standard Contractual Clauses in the AWS Data Processing Addendum. |
| Clerk | Sign-in, account management and session cookies. | Name, email address, sign-in identifiers, IP address, browser and device details. | United States. EU-US Data Privacy Framework or Standard Contractual Clauses (to verify). |
| Paddle | Merchant of record: checkout, payments, tax, invoices and refunds. | Name, email, billing address, payment details and purchase records. Paddle collects these itself; we receive transaction records. | United Kingdom. UK adequacy decision (to verify Paddle's processing locations). |
| OpenAI | AI models that plan, run and summarize workflows. | Prompts, workflow definitions, and page content and screenshots from the sites your workflows visit. | United States. Standard Contractual Clauses or EU-US Data Privacy Framework (to verify). |
| Anthropic | AI models that plan, run and summarize workflows. | Prompts, workflow definitions, and page content and screenshots from the sites your workflows visit. | United States. Standard Contractual Clauses or EU-US Data Privacy Framework (to verify). |
| IPRoyal | Residential proxy network for browser traffic. | Browser traffic to the sites your workflows visit (encrypted end to end for HTTPS sites), chosen exit country, proxy usage totals. | Lithuania (to verify); exit addresses worldwide. Within the EU/EEA (to verify). |
| Decodo | Residential proxy network for browser traffic. | Browser traffic to the sites your workflows visit (encrypted end to end for HTTPS sites), chosen exit country. | Lithuania (to verify); exit addresses worldwide. Within the EU/EEA (to verify). |
| CapSolver | CAPTCHA solving. | The challenged page's address, the CAPTCHA's site key and parameters, browser user agent, and the browser's proxy address and credentials. | To verify. To verify. |
| 2Captcha | CAPTCHA solving. | The challenged page's address, the CAPTCHA's site key and parameters, browser user agent, and the browser's proxy address and credentials. | To verify. To verify. |
| Anti-Captcha | CAPTCHA solving. | The challenged page's address, the CAPTCHA's site key and parameters, browser user agent, and the browser's proxy address and credentials. | To verify. To verify. |
| Google Fonts | Web fonts for this website. | Your IP address and browser details when a page loads its fonts. | United States and worldwide. EU-US Data Privacy Framework (to verify). |
| Cloudflare | DNS for our domain (DNS only; our web traffic does not pass through Cloudflare). | DNS lookups for our hostnames, which come from your DNS resolver. | Worldwide. Standard Contractual Clauses or EU-US Data Privacy Framework (to verify). |
Websites your workflows visit
The sites your workflows open are not our subprocessors. They receive the browser traffic a workflow sends them, as they would from any browser, and handle it under their own policies.