Last updated 28 September 2026

Sub-processors everyone who helps.

The companies that handle some of your data so Ampersand can run, what each does, and where.

In short
  • Each sees only what its job needs.
  • Each is bound by a data processing agreement.
  • We’ll update this page before adding anyone new.

Hosting and storage

  • Cloudflare, Inc. (United States, EU data centres): hosts the app and the site, stores accounts, trips and uploads, and checks forms for bots (Turnstile). Data Privacy Framework and standard contractual clauses.

Email

  • The email service (Resend, Inc. or Postmark / ActiveCampaign, United States): sends account emails: confirmations, password resets, trip invites and, once, the launch email to the waitlist. Sees your email address and the message.

The assistant

  • Anthropic, PBC (United States), or Google LLC (United States), depending on which is connected: answers the assistant’s questions. Sees your question and the parts of the trip it needs. Under their commercial terms, neither trains on it.

Maps, places and photos

  • Map tiles (Esri or the map provider we use): the area of the map on your screen.
  • Place search (OpenStreetMap’s Nominatim and Overpass, or the geocoding provider we use): the names and places you search for, sent by our server, not from your device.
  • Open-Meteo: weather for the places on your trip.
  • Unsplash and Wikimedia Commons: photos of places.
  • Google Fonts (Google LLC): the fonts on this site and in the app’s looks.

Changes

We’ll update this page at least 30 days before a new sub-processor starts handling your data, so you can object or leave.

Questions about any of this? hello@example.com