Subprocessors
This page lists the third parties Closient Search Inc. uses to process personal information on our behalf ("subprocessors"), and the infrastructure we run ourselves. It is referenced from our Privacy Policy and kept current as our infrastructure changes — if you rely on a specific entry for a compliance review, contact info@closient.com to confirm the current state before relying on a saved copy.
Third-party subprocessors
| Provider | Purpose | Data involved | Approximate location |
|---|---|---|---|
| Cloudflare, Inc. | DNS, content delivery network, network tunnel, and object storage for uploaded product media | Request metadata; uploaded media files | Global edge network; U.S.-headquartered |
| ReliableSite.net Inc. | Bare-metal server hosting for our production application and database | All Service data, while processing a request | United States |
| Backblaze, Inc. | Encrypted backup storage for our database and object storage | Encrypted backups of all Service data | United States |
| Stripe, Inc. | Payment processing and subscription billing for brand/organization accounts | Billing contact information and payment method (Closient never receives your full card number) | United States |
| Telnyx LLC | SMS and voice delivery for phone verification and opted-in product recall/safety alerts | Phone number, message content | United States |
| Postmark (a division of ActiveCampaign, LLC) | Transactional email delivery (account, billing, and notification email) | Email address, message content | United States |
| Google LLC | Sign-in (Google/"One Tap"), Google Analytics (GA4, consent-gated), and Google Maps (location search feature) | Profile information you authorize at sign-in; consent-gated analytics events; map queries | United States |
| Microsoft Corporation | Sign-in with Microsoft | Profile information you authorize at sign-in | United States |
| LinkedIn Corporation (a Microsoft subsidiary) | Sign-in with LinkedIn | Profile information you authorize at sign-in | United States |
| PostHog Inc. | Consent-gated product analytics, including masked-input session replay | Consent-gated usage events | United States |
| ipinfo.io (Prior Art Systems Inc.) | Best-effort visitor region lookup (only when a request's Cloudflare region signal isn't available), used to select the correct cookie-consent treatment for your region | IP address, resolved to a country/region only — never stored as raw IP | United States |
| Sentry (Functional Software, Inc., d/b/a Sentry) | Read-only correlation of customer support inquiries against previously known error issues | Historical error-issue metadata; Sentry does not receive new error events from Closient today (see Bugsink, below) | United States |
We do not sell personal information to any of the above, and each processes data only under our instructions and for the purposes listed.
Self-hosted infrastructure (not third-party processors)
The following tools run on infrastructure we control directly. We list them here for transparency, but — because the data never leaves our own control — they are not "subprocessors" in the data-protection sense.
| Tool | Purpose |
|---|---|
| Bugsink (self-hosted, at errors.closient.com) | Application error tracking |
| OpenObserve (self-hosted, at telemetry.closient.com) | Consent-gated real-user-monitoring performance telemetry |
| Ollama (self-hosted) | Background generation of substance/ingredient descriptions; runs entirely on our own infrastructure, sends nothing to a third party |
A note on our store-locator widget
Businesses can embed a Closient store-locator widget on their own website. When your browser doesn't share a precise location directly, that widget falls back to a third-party IP-geolocation lookup and a third-party mapping library to show nearby stores. Because the widget runs on a page we don't operate, its data handling is a joint consideration between Closient and the business hosting it; contact us if you'd like detail on a specific integration.
Changes to this page
We update this page when we add, remove, or change a subprocessor. It is not itself a versioned legal document the way our Privacy Policy, Cookie Policy, and Terms and Conditions are — those record exactly which version you agreed to; this page always reflects our current infrastructure.