We use the following sub-processors to provide Clue. Our systems and stored data are in the United States. We give customers 30 days' notice before adding or replacing a sub-processor; to get notices, email support@gocanonical.com. Notices are sent by email only.
How your data moves
- Data sync. When you install Clue, your Stripe data (up to the last 12 months of payment history, then live updates) goes from Stripe to our systems on Amazon Web Services and is stored there. It stops being added to when you uninstall, and we delete the synced copy within 30 days.
- Opening a buyer. When you open a buyer, Clue sends only the inputs each lookup needs to the sources below, and sends a limited, filtered set of data to the AI provider.
- Plans and boosts. Plan subscriptions and boost purchases go through Stripe, acting as our billing processor. Stripe receives your billing details on its Checkout and Customer Portal pages and sends us subscription and payment records.
Features that run automatically use only synced data and the lookups below, and send nothing further to any third party.
Infrastructure
| Sub-processor | Purpose | Data | Location |
|---|---|---|---|
| Amazon Web Services | Hosting, database, secrets, logging, queues, backups, and storage of the synced Stripe data | All data we store | US (us-east-1) |
| Stripe (billing) | Taking payment for plans and boosts: Checkout, subscriptions, Customer Portal, invoices and receipts, tax calculation | Merchant billing details and contact, plan and payment records | US |
AI
| Sub-processor | Purpose | Data | Location |
|---|---|---|---|
| Anthropic | Writes summaries and explanations; suggests merchant profile settings | Buyer name and addresses, email domain and first-seen year, derived signals; merchant business name and website. Never raw email, phone or IP, and never licensed record values | Stored data stays in the United States (AWS us-east-1). Our AI provider may process requests in the United States or other countries where it operates. |
Data sources (lookups)
| Category | Used for | Data sent |
|---|---|---|
| Email reputation | Is this email real, old, risky | Email address |
| Breach records (Have I Been Pwned) | Has this email appeared in known breaches | Email address |
| Public profile directories | Does a public profile exist for this email | Email hash or address |
| Domain records | Age and mail setup of the email domain | Email domain |
| Phone reputation | Is this number real, risky | Phone number |
| Carrier records | Line type and carrier; caller name comparison | Phone number, buyer first and last name, and billing address (street, city, postal code, country) |
| Postal address data | Is the address deliverable | Address |
| Property and deed records | Public ownership records for a verified address | Address |
| Person records | Does the claimed identity match a record | Email, or name with address |
| IP network intelligence | Does the IP belong to a proxy, VPN or hosting network; approximate location | IP address |
Not sub-processors
- Stripe, as the platform we receive data from and return results through. It is an independent controller of its own data. Stripe also appears above as our billing processor for plans and boosts, which is a separate role.
Notes
- Clue sends each merchant's data only to sub-processors that need it for that lookup.
- We do not use sub-processors for advertising.