Subprocessors
Last updated: 2026-09-05 (draft — [REVIEW])
GravityAgent processes form submissions on behalf of the WordPress sites that use it. To do that we rely on the following third-party services. Each is engaged only for the purpose listed. We do not sell data, and no service on this list is permitted to use your submissions to train a model.
| Subprocessor | Purpose | What it receives | When it is engaged | Location and terms |
|---|---|---|---|---|
| Cloudflare, Inc. (San Francisco, USA) | Hosts the GravityAgent service: compute (Workers, Durable Objects), the database (D1), the metering queue, request logs, and the AI Gateway through which model requests pass. | The submission while it is being judged (in memory only); the non-content operational records described in the Privacy Policy. | Every request. | Stored data: United States (D1 region ENAM). Compute runs at the Cloudflare location nearest your server. Cloudflare DPA v6.4, 2026-04-03 · Cloudflare subprocessors |
| Google LLC (Mountain View, USA) — Gemini API, paid tier | The language model that judges each submission. | The submitted field values (minus your excluded fields), file names, ambient metadata (IP, user agent, timestamp, page URL), your site profile and notes, and the correction examples selected for that submission. | Every scored submission. | Google's Gemini API paid tier: Google "doesn't use your prompts … or responses to improve our products" and logs prompts and responses only "for a limited period of time, solely for detecting and preventing violations of the Prohibited Use Policy". Data may be processed at any Google facility. Gemini API Terms, effective 2026-03-23 · Google processor DPA |
| Firecrawl (SideGuide Technologies, Inc., Delaware, USA) | Reads the public pages of your website so we can build a short profile of what your business does. | Your site's public URLs and their public page text. Never a form submission, never anything behind a login. | Only when a crawl runs: at activation, on a manual re-crawl, and roughly every 60 days. Not engaged at all by scoring. | United States. Firecrawl may cache fetched public pages for about two days. Privacy Policy, 2024-12-26 · Terms, 2024-11-05 |
| Freemius Inc. (Wilmington, USA) | Merchant of record for paid plans: checkout, licence keys, the free trial, and plugin update delivery. | Your site URL, WordPress and PHP versions, licence and billing details you enter at checkout, and — only if you opt in — your administrator e-mail and a plugin usage profile. Never a form submission. | Paid plans and the trial, and the plugin's update check. Activating the Free tier does not involve Freemius. | United States. Privacy Policy · DPA (last modified 2026-08-19) |
Changes to this list
We will update this page at least 30 days before adding a subprocessor that would receive submission content, and note the date at the top. If you object to a new subprocessor you may terminate the Service under the DPA.
Questions: [email protected].