Sub-processors

To run Craft & System we rely on a small number of trusted third-party providers (“sub-processors”) that process limited personal information on our behalf. Each is bound by its own contractual and security commitments and maintains its own safeguards. We keep this list short on purpose, and the desktop app stays offline — your manuscripts and creative work never reach any of these providers.

Current sub-processors

• Lemon Squeezy— payments and merchant of record. Runs checkout, handles VAT and sales tax, and sends billing-related email. Processes your billing details, order information, and email address. Maintains its own privacy and security safeguards as the seller of record.
• Resend— transactional email. Sends your license key, magic-link sign-in messages, and lost-key recovery emails. Processes your email address and message content. Maintains its own privacy and security safeguards.
• Cloudflare— hosting, content delivery, object storage, and privacy-friendly analytics. Serves our website and download files. Processes technical data such as IP address and aggregate usage information. Maintains its own privacy and security safeguards.

Changes and notifications

We update this list whenever our sub-processors change. If you'd like to be notified of additions or changes, email us at the address below and we'll add you to our notification list. For how these providers fit into our overall data practices, see our Privacy Policy.