Sub-processors
Last updated: 2 July 2026
To deliver Curio, we use the third-party providers below. Each processes data under its
own data-protection terms. Where a provider is located outside the EEA, transfers rely on
that provider's Standard Contractual Clauses and/or EU-US Data Privacy Framework
certification. We keep this list current; material changes are noted in our
| Provider | What it does for Curio | Data it sees |
|---|---|---|
| Anthropic (Claude) | Generates the assistant's answers | The visitor's message plus the relevant page content, at request time. Not retained by Curio. |
| Voyage AI | Turns text into search vectors so the assistant can find relevant content | Query and content text |
| DigitalOcean | Hosts the application and the local data store (sessions, rate limits, search index) | Operational data in transit and at rest on the server |
| MongoDB | Stores accounts, usage/billing records, anonymised analytics, and support tickets | Account and metadata (no conversations) |
| Stripe | Processes credit-purchase payments | Billing contact and payment details (handled by Stripe) |
| Zoho Mail | Sends transactional email (sign-in links, requested transcripts, notices) | Recipient email address and message content |
The key point: conversations are never sent to a store. A visitor's message passes
through the AI providers only to compute an answer, is relayed to the site owner's own
destination if they enabled that, and is otherwise discarded.
Questions about our sub-processors? Email curio@whitneys.co.