Subprocessors
The service providers that process personal information for the chat2plan.com website and its waitlist, what each one does, and what it touches.
Last updated: 30 September 2026
Section 4 of our Privacy Policy names the service providers that process your personal information on our behalf, and says that list is exhaustive. This page gives each one’s role, the data it can access, its location and how long the data is kept. Cloudflare and Resend each use their own subprocessors, which each lists on its website; the Resend row below names two of Resend’s, Amazon Web Services and RunPod.
What this page covers. The chat2plan.com website and its waitlist, and nothing else. The Chat2Plan app is in development; it will have its own privacy policy, published before the app is available.
Our providers
| Provider | Role | Data it can access | Location | Retention |
|---|---|---|---|---|
| Cloudflare | Hosts the website and the waitlist service (content delivery and Workers); runs the waitlist's database (D1) and the bot check on the waitlist form (Turnstile) | The data every web request carries, such as the IP address, the browser's User-Agent header, the page requested and the time. Waitlist: email address, the language of the page it was signed up on, whether it is confirmed, send attempts, timestamps, a one-way hash of the code in each of the two links we email you until you confirm (after which only the removal link's), and a keyed hash of the mailbox; never the IP address. Turnstile, the bot check on pages with the waitlist form: the IP address and browser signals such as the TLS fingerprint and the User-Agent header, for every visitor to such a page, whether or not they submit the form. Cloudflare also uses these signals, as a controller in its own right, to improve Turnstile's bot detection | Cloudflare's global network; the waitlist database in Eastern North America, a placement Cloudflare treats as a preference, not a guarantee | Request data: we keep no request logs of our own. Waitlist: an unconfirmed address 7 days, a confirmed one until it is removed, and after a removal only a keyed hash of the mailbox and the date of the removal, indefinitely (Privacy Policy Section 2). Deleted waitlist data can be restored from point-in-time recovery for up to 30 days |
| Resend | Sends the waitlist's emails: the confirmation email, and the one email when you can start using Chat2Plan | Your email address and the email we send you, with its two links (confirm and remove). Resend delivers through its own providers, including Amazon Web Services, and a small sample of emails may be checked for trust and safety by a model on dedicated infrastructure that Resend operates at its provider RunPod; Resend states that neither it nor its AI subprocessors, RunPod among them, use customer content to train or fine-tune models | Stored in the United States, whichever sending region we use | Up to 30 days while our account with Resend is active, plus up to 7 days in its backups; after our account ends, what remains is deleted within 90 days. An address that bounces permanently, or whose mail provider reports a spam complaint to Resend, stays on Resend's suppression list until we remove it |
| Proton Mail | Our email: the privacy@ilzaro.com and security@ilzaro.com mailboxes; replies to our waitlist emails arrive at privacy@ilzaro.com | Whatever you choose to send us by email, including replies to our emails | Proton AG, based in Switzerland | As long as we need an email to answer you and to keep a record of any privacy request (Privacy Policy Section 6) |
International transfers
We are based in the United States, and the waitlist is stored and processed there and wherever Cloudflare serves the website. Cloudflare and Resend are certified under the EU-U.S. Data Privacy Framework and its UK extension, and their data processing terms with us include the European Commission’s Standard Contractual Clauses. Ilzaro is not itself certified under the Data Privacy Framework. Section 8 of our Privacy Policy has the details.
Changes to this list
We update this page when we add, remove, or replace a provider, and change the “Last updated” date at the top.
Ilzaro LLC.