Subprocessors

Overview

Short version. Arcalotl uses third-party providers to run payments, hosting, analytics, monitoring, storage, and community platform integrations.

This page lists current subprocessors and provider categories used to operate Arcalotl. Provider use can vary by environment, region, product area, and enabled integration.

Current subprocessors

Short version. These providers support core product operations.

• Stripe. Payment processing, Stripe Connect, Checkout, Billing Portal, subscriptions, refunds, disputes, payment metadata, and connected-account services.
• Discord. Operator authentication, server discovery, bot functionality, role access, member messaging, and community API operations where Discord integration is enabled.
• PostHog. Product analytics, event analytics, dashboard user analytics, checkout funnel analytics, and exception capture.
• Vercel Analytics. Website and application analytics, page performance, and usage measurement.
• Hetzner Cloud. Hosting and compute infrastructure for Arcalotl runtime environments.
• Hetzner Object Storage. Raw webhook payload storage, event-log payload storage, replay support, and operational auditability where object storage is enabled.
• Grafana Cloud. Metrics, logs, traces, dashboards, alerting, and operational observability.
• PagerDuty, Discord alert channels, and configured SMTP providers. Operational alerts and incident response routing where enabled.

Provider changes

Short version. We may add, replace, or remove providers as the Service changes.

Arcalotl may update this list when providers are added, removed, or materially changed. Arcalotl will give operators at least 30 days' notice before adding or replacing a subprocessor that will process covered personal data, unless shorter notice is required for security, availability, legal, or platform reasons. Operators may object during the notice period on reasonable data protection grounds.

Contact

For questions about subprocessors or data processing, contact privacy@arcalotl.com.