On this page
This page is Annex 1 to the Storystak Subscription Terms. It lists the third parties that process Customer Content or account data for Storystak, and, separately, the vendors that run our website. We email each account owner at least 14 days before a new subprocessor begins processing Customer Content, as Section 10.3 of the Subscription Terms describes.
Subprocessors (Customer Content or account data)
| Subprocessor | What it does for Storystak | Data it processes | Location |
|---|---|---|---|
| Sevalla (a Kinsta platform) | Hosts each Suite's application and its own database, and Dot | Customer Content while it is served, account data, Usage Data, connector sign-in tokens | United States (Google Cloud us-west3, Salt Lake City, Utah) |
| Cloudflare | DNS for storystak.app and storystak.com, and the network edge in front of the Suites, the connector, Dot and storystak.com | All requests and responses passing through, including Customer Content in transit; IP addresses | Global network |
| GitHub | Stores each Suite's content in its own private repository, and runs the Suite's scheduled jobs (building new Client Staks, sending notification email) | Customer Content, User names and email addresses, terms-acceptance records, proposed changes and Dot answers | United States |
| Anthropic | AI processing (Claude API): the research step that builds new Client Staks, Dot's structuring step, and the optional report summary in the Reports kit | Client names and onboarding facts, starting files, public research, Dot call transcripts, report figures where the Reports kit is used | Stored in the United States; the AI processing itself can run in other countries |
| ElevenLabs | Dot's live voice calls | The caller's voice and the call transcript | United States |
| Resend | Service email from the Suite, such as notices, digests and trial emails | Names, email addresses, and the content of each email, which can name Clients | United States |
| Stripe | Billing and card payments | Billing contact details, payment details | United States |
| Google (Workspace) | User sign-in to the Suite; Storystak's business email, calendar and documents, which hold support emails and onboarding material | Names, email addresses, Google profile identifiers; what customers send us by email | United States |
| Bonsai | Proposals, Order Forms and invoices | Names, email addresses, billing details | United States |
Website vendors (no Customer Content)
| Vendor | What it does | Data it processes | Location |
|---|---|---|---|
| Sevalla (a Kinsta platform) | Hosts storystak.com, our own count of visits to it, and the applications sent from it | Applications (name, work email, agency website, role, number of clients), visit records | United States (the visit and application records are on Google Cloud us-west3, Salt Lake City, Utah) |
| Resend | Emails our team when someone applies | The application's details | United States |
| Slack | Tells our team when someone applies | The application's details | United States |
| Google Analytics | Counts visits to storystak.com and which pages are read | Pages viewed, IP address, device and browser data | United States |
| Google Fonts | Serves the fonts used on storystak.com and in the Surface | IP address when the fonts load | United States |
| unpkg | Serves the icon font used on storystak.com and in the Surface | IP address when the icons load | Global network |
| Cal.com | Call booking on storystak.com | Names, email addresses, booking details | United States |
Not our subprocessors
- The AI tools you connect, such as Claude or ChatGPT. Your team chooses and licenses them, and they read your Stak at your direction under their own terms.
- Data sources you connect to a kit. The Reports kit reads marketing figures from your agency's own Windsor.ai account, using your agency's own key. Windsor.ai works for you, not for Storystak.
Changes
November 10, 2026: first published.