Legal
Sub-processors
These are the third parties that may Process Personal Data when Common Ninja Ltd. provides SendRaven to its customers. Each one is bound by written data protection terms. How we add new sub-processors, and how customers can object, is set out in Section 5 of our Data Processing Addendum.
Infrastructure
| Sub-processor | Processing location | Purpose |
|---|---|---|
| Amazon Web Services, Inc. (Amazon SES, Amazon S3) | USA (Oregon, us-west-2) | Sending and receiving email; storage of received mail, deleted after 30 days |
| Amazon Web Services, Inc. | USA (Virginia, us-east-1) | Hosting for the dashboard, the API, the workers and the MCP server |
| MongoDB, Inc. (MongoDB Atlas, on AWS) | USA (Ohio, us-east-2) | Managed database |
| Domainee (Common Ninja Ltd., on AWS) | Germany (Frankfurt) and USA, nearest to the recipient | TLS and routing for customers' click and open tracking hostnames. It sees each request's signed path, IP address and user agent, and nothing else |
AI processing
| Sub-processor | Processing location | Purpose |
|---|---|---|
| Anthropic, PBC | USA | The dashboard assistant, which reads and acts on workspace data when a signed-in user asks it to |
Business operations
| Sub-processor | Processing location | Purpose |
|---|---|---|
| Stripe, Inc. | USA | Payments and subscriptions |
| Google LLC (Google Sign-In) | USA | Sign-in with a Google account, when the user chooses it |
Analytics
These run on our website and dashboard. They do not run in the email we send for customers.
| Sub-processor | Processing location | Purpose |
|---|---|---|
| Google LLC (Google Analytics, Tag Manager) | USA | Website and product analytics |
Changes to this list
We email the owners of each customer workspace, and update this page, at least 30 days before a new sub-processor starts processing personal data. To receive these notices at another address, or to object to a new sub-processor, write to privacy@sendraven.ai.
Delivering an email means handing it to its recipient's mail servers, and receiving one means accepting it from the sender's. Those mail systems, and anything a customer connects to SendRaven, such as a webhook endpoint or an AI agent holding its API key, act for the recipient or for the customer and are not our sub-processors.