Effective October 15, 2026·Last updated October 15, 2026·Version 1.1
01How this list works#
When one of these companies can touch your customers' data, it acts as our subprocessor under the Data Processing Addendum. Services you connect with your own account (your database host, Twilio, your own email-sending account, Stripe, AI key, storage, Google Business Profile) are your providers, not our subprocessors, and you contract with them directly. For example, if you connect your own Resend account, that account is yours. Our own Resend account, listed below, is our subprocessor.
02peak-engine.com website#
These companies help run peak-engine.com. They handle data about site visitors and people who contact us, never your customers' data from the apps:
Subprocessors for the marketing site| Company | What it does for us | Data involved | Where |
|---|
| Vercel Inc. | Hosts the site and runs its server functions | Requests, form entries in transit, IP address, logs | U.S. |
|---|
| Resend | Sends form confirmations and lead alerts to our team, and holds our email list ("Stay sharp" signups) | Name, email, form entries, unsubscribe status | U.S. |
|---|
| Google LLC (Google Workspace) | Our team inbox. Every form you send is emailed to us there, and that email is our record of your request and any texting consent | Everything you put in a form, including consent details | U.S. |
|---|
| Google LLC (Google Analytics) | Counts visits and shows which pages work | Pages viewed, device, browser, IP address, cookie ID | U.S. |
|---|
| Microsoft Corporation (Clarity) | Session recordings and heatmaps, only if you click "Accept analytics" | Clicks, scrolls, page views (typed entries masked), device, IP address, cookie IDs | U.S. |
|---|
| Cloudflare, Inc. (Turnstile) | Bot check on our forms | IP address, browser signals | U.S. and global network |
|---|
| Upstash, Inc. | Rate limits on our forms | Counters keyed by a one-way hash of IP address and email, kept minutes to a day | U.S. |
|---|
| Sanity Inc. | Content system for our blog and insights | Our own content only, no form data | U.S. |
|---|
We don't use PostHog, Google Ads, Meta Pixel or Microsoft Advertising (UET) on our marketing site today. We'll update this page, with notice, before adding any of them.
Session recording stays off unless you accept it, and Global Privacy Control or "Reject" in the cookie banner keeps it off and turns off Google Analytics' ad features. The "Your Privacy Choices" link in the footer reopens the banner. See the Cookie Notice.
03Peak Systems app#
These companies help run the Peak apps (Peak Systems) and our managed plans:
Subprocessors for the Peak Systems app and managed plans| Company | What it does for us | Data involved | Where |
|---|
| Vercel Inc. | Hosts and runs the apps | Requests and responses, including your customers' data in transit; logs | U.S. |
|---|
| Inngest, Inc. | Runs background jobs and workflows | Job data, which can include your customers' data while a job runs | U.S. |
|---|
| Neon (Databricks, Inc.) | Peak Accounts database (sign-in, workspace routing, encrypted keys); databases we run for managed plans | Account and workspace data; managed-plan data | U.S. |
|---|
| Upstash, Inc. | Redis: job queues, caching and rate limits | Temporary job data, rate-limit counters | U.S. |
|---|
| Cloudflare, Inc. | File storage (R2) and bot checks (Turnstile) | Files and photos you upload; IP address and browser signals | U.S. and global network |
|---|
| Resend | Our account and service emails, and email sent through our account on managed plans | Email addresses, message content | U.S. |
|---|
| Twilio Inc. | Texts and calls, only when our managed account is used | Phone numbers, message content, call data | U.S. |
|---|
| Google LLC | Google sign-in (OAuth), our team's Google Workspace, and Google Business Profile access you authorize | Name, email, photo; support and account emails; profile data you authorize | U.S. |
|---|
| HighLevel, Inc. (LeadConnector) | The lead-and-job app, phone numbers and messaging for managed plans | Contacts, messages, calls, pipeline data | U.S. |
|---|
| Anthropic, PBC | AI features, only when Peak's pooled AI keys are used | Prompts and outputs | U.S. |
|---|
| OpenAI, L.L.C. | AI features, only when Peak's pooled AI keys are used | Prompts and outputs | U.S. |
|---|
| Stripe, Inc. | Billing for paid plans | Billing contact, payment tokens | U.S. |
|---|
| Jotform Inc. | Forms and e-signatures on managed plans | Form entries, signatures | U.S. |
|---|
AI keys. With bring-your-own keys, your data goes straight to your own AI provider, which works for you and isn't our subprocessor. Anthropic and OpenAI act as our subprocessors only when Peak's pooled keys are used.
PostHog (product analytics) is used only if enabled, and it isn't used today. We'll update this page, with notice, before turning it on.
04Changes and objections#
We'll update this page and email account owners at least 30 days before adding or replacing a subprocessor that handles your customers' data. You can object on reasonable data-protection grounds within 15 days by emailing hello@peak-engine.com. If we can't resolve it, you can stop using the affected part of the Service and delete your workspace.
Fresh Lime Media LLC dba Peak Engine · 972 W 1050 S, American Fork, UT 84003 · hello@peak-engine.com · (801) 822-9439
