OutcomeArc uses carefully selected service providers to operate the Service. This page identifies the principal subprocessors that may process Customer Content or personal data on our behalf.
Our role and standards
Velora Studios, LLC engages the providers below to deliver OutcomeArc. Before engaging a subprocessor, we assess its role and require data-protection and confidentiality commitments appropriate to the processing. Providers may use their own affiliates and infrastructure vendors as described in their terms and subprocessor disclosures.
Current subprocessors
| Provider | Purpose | Data processed | Primary processing locations |
|---|---|---|---|
| Supabase, Inc. | Database, authentication, private object storage, APIs, and serverless application infrastructure | Account details, authentication data, Customer Content, attachments, workspace configuration, and application metadata | United States or the configured Supabase project region |
| Vercel Inc. | Hosting of the OutcomeArc web application | IP addresses, request and device data, and application data transmitted through hosted services | United States and global edge locations |
| Cloudflare, Inc. | Marketing-site hosting, DNS, content delivery, traffic security, proxying, and request logging | IP addresses, request and device data, domain information, and security logs | Global edge locations |
| Microsoft Corporation | Azure OpenAI model processing for configured AI features | Authorized prompt context, Customer Content needed for a generation, AI output, and usage metadata | The configured Microsoft Azure region |
| Trigger.dev, Inc. | Durable background tasks, scheduled workflows, and AI-job orchestration | Task identifiers, authorized Customer Content needed for a task, workflow state, and diagnostic metadata | United States and other locations described by Trigger.dev |
| ActiveCampaign, LLC (Postmark) | Inbound and outbound support email, authentication email, delivery events, surveys, and scheduled reports | Names, email addresses, message bodies, attachments, delivery metadata, and IP or request data | United States and other locations described by ActiveCampaign/Postmark |
Customer-directed integrations
Customers may configure integrations such as Help Scout imports or outbound webhooks. These services process data at the customer’s direction under the customer’s relationship with that provider. A destination that receives data only because a customer configured it is not necessarily our subprocessor.
International transfers
Subprocessors may process data outside the country where it was collected. Where applicable law requires it, we rely on safeguards such as adequacy decisions, the European Commission’s Standard Contractual Clauses, the UK Addendum, or another valid transfer mechanism. More information is available in our Privacy Policy.
Changes to this list
We may add, replace, or remove subprocessors as the Service evolves. We will update this page before a new material subprocessor begins processing Customer Content when reasonably practicable. Customers with a contractual right to direct notices may request them at [email protected].
If you reasonably object to a new subprocessor on documented data-protection grounds, contact us promptly. We will review the concern in good faith and discuss commercially reasonable alternatives. If no resolution is available, you may stop using the affected Service and terminate it in accordance with your agreement.
Contact
Questions about subprocessors or data-processing terms may be sent to [email protected]. Formal legal matters may be sent to [email protected] or by mail to: Attn: Velora Studios, LLC, 16192 Coastal Highway, Lewes, Delaware 19958, United States.