Legal
Subprocessors
Last updated: September 11, 2026
This page lists the third parties Rare X Labs Inc. uses to help provide the Rare CRM Service, and what each one does. It's referenced from our Privacy Policy and our Terms of Service, and — once a formal Data Processing Addendum exists — from that too.
We keep this list on its own page, separate from the Privacy Policy and Terms of Service, so it can be updated as our stack changes without requiring a full revision of those documents. To be notified before we add a new subprocessor or replace one, email contact@rarecrm.ai and ask to be added to the subprocessor change list.
| Subprocessor | Purpose | What it processes |
|---|---|---|
| Cloudflare | Application hosting, edge network, storage, and AI models (including voice transcription) | Journal content and attachments, application data, voice audio |
| code.storage | Storage | Journal content and attachments |
| AI models; optional contacts sync, if a user connects it; business operations (e.g., customer support) | Journal content and prompts sent to AI models; contact data a user authorizes for contacts sync; support communications and related account information | |
| WorkOS | Authentication | Account credentials / login identity |
| Stripe | Payment processing | Billing and payment information |
| PostHog | Product usage analytics | Usage/diagnostic data, device/browser information |
Data processed by these subprocessors may be handled in countries other than the one you're located in — see Section 6 of the Privacy Policy.